Ubuntu 18.04 LTS on ARM fails to start

I installed an Ubuntu on ARM --> not error

root@MyOpenVas:~# openvas-setup 
OK: Directory for keys (/var/lib/openvas/private/CA) exists.
OK: Directory for certificates (/var/lib/openvas/CA) exists.
OK: CA key found in /var/lib/openvas/private/CA/cakey.pem
OK: CA certificate found in /var/lib/openvas/CA/cacert.pem
OK: CA certificate verified.
OK: Certificate /var/lib/openvas/CA/clientcert.pem verified.
OK: Certificate /var/lib/openvas/CA/servercert.pem verified.

OK: Your OpenVAS certificate infrastructure passed validation.
OpenVAS community feed server - http://www.openvas.org/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the OpenVAS mailing lists
or the OpenVAS IRC chat. See http://www.openvas.org/ for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be blocked.

receiving incremental file list
plugin_feed_info.inc
          1,131 100%    1.08MB/s    0:00:00 (xfr#1, to-chk=0/1)

sent 43 bytes  received 1,234 bytes  851.33 bytes/sec
total size is 1,131  speedup is 0.89
OpenVAS community feed server - http://www.openvas.org/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the OpenVAS mailing lists
or the OpenVAS IRC chat. See http://www.openvas.org/ for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be blocked.

receiving incremental file list
timestamp
             13 100%   12.70kB/s    0:00:00 (xfr#1, to-chk=0/1)

sent 43 bytes  received 105 bytes  98.67 bytes/sec
total size is 13  speedup is 0.09
OpenVAS community feed server - http://www.openvas.org/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the OpenVAS mailing lists
or the OpenVAS IRC chat. See http://www.openvas.org/ for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be blocked.

receiving incremental file list
timestamp
             13 100%   12.70kB/s    0:00:00 (xfr#1, to-chk=0/1)

sent 43 bytes  received 106 bytes  298.00 bytes/sec
total size is 13  speedup is 0.09

(openvassd:6222): lib  kb_redis-CRITICAL **: 16:36:54.610: get_redis_ctx: redis connection error: Connection refused

(openvassd:6222): lib  kb_redis-CRITICAL **: 16:36:54.610: redis_new: cannot access redis at '/tmp/redis.sock'

(openvassd:6222): lib  kb_redis-CRITICAL **: 16:36:54.610: get_redis_ctx: redis connection error: Connection refused
openvassd: no process found

I have a strong feeling that there are some issues with the redis (I already changed the default socket location to match /tmp/redis.sock and the fact that the supervised mode should be “systemd” instead of “no”).

:frowning:

After a failed start, I get this :

root@MyOpenVas:~# systemctl status openvas-scanner.service
● openvas-scanner.service - Open Vulnerability Assessment System Scanner Daemon
   Loaded: loaded (/lib/systemd/system/openvas-scanner.service; enabled; vendor preset: enabled)
   Active: activating (start) since Mon 2018-09-17 18:49:02 CEST; 3s ago
     Docs: man:openvassd(8)
           http://www.openvas.org/
Cntrl PID: 6787 (openvassd)
    Tasks: 1 (limit: 4915)
   CGroup: /system.slice/openvas-scanner.service
           └─6787 /usr/sbin/openvassd --unix-socket=/tmp/redis.sock

Sep 17 18:49:02 scw-a2f9e9 systemd[1]: Starting Open Vulnerability Assessment System Scanner Daemon...

journalctl -xe seems to mainly complain about the impossibility to connect using PAM …

\T,

unix-socket is not the redis socket. It’s the socket for communication with openvasmd/gvmd
Take a look at https://github.com/greenbone/openvas-scanner/blob/master/doc/redis_config.txt for some details about the redis usage.

2 Likes

Does redis has his socked there ? If not fix your redis installation. That is not a Scanner or ARM-Issue it´s user configuration.

2 Likes