I am totally new to openvas and a total beginner to Linux. And my language skills aren’t good. Briefly writing - a drama. But I am trying to install and get to know this software.
Test completeness and readiness of GVM-21.4.3
Step 1: Checking OpenVAS (Scanner)...
OK: OpenVAS Scanner is present in version 21.4.3.
OK: Server CA Certificate is present as /var/lib/gvm/CA/servercert.pem.
Checking permissions of /var/lib/openvas/gnupg/*
OK: _gvm owns all files in /var/lib/openvas/gnupg
OK: redis-server is present.
OK: scanner (db_address setting) is configured properly using the redis-server socket: /var/run/redis-openvas/redis-server.sock
OK: redis-server is running and listening on socket: /var/run/redis-openvas/redis-server.sock.
OK: redis-server configuration is OK and redis-server is running.
OK: _gvm owns all files in /var/lib/openvas/plugins
OK: NVT collection in /var/lib/openvas/plugins contains 103287 NVTs.
Checking that the obsolete redis database has been removed
OK: No old Redis DB
OK: ospd-OpenVAS is present in version 21.4.3.
Step 2: Checking GVMD Manager ...
OK: GVM Manager (gvmd) is present in version 21.4.4.
Step 3: Checking Certificates ...
OK: GVM client certificate is valid and present as /var/lib/gvm/CA/clientcert.pem.
OK: Your GVM certificate infrastructure passed validation.
Step 4: Checking data ...
OK: SCAP data found in /var/lib/gvm/scap-data.
OK: CERT data found in /var/lib/gvm/cert-data.
Step 5: Checking Postgresql DB and user ...
OK: Postgresql version and default port are OK.
gvmd | _gvm | UTF8 | pl_PL.UTF-8 | pl_PL.UTF-8 |
OK: At least one user exists.
Step 6: Checking Greenbone Security Assistant (GSA) ...
ERROR: No Greenbone Security Assistant (gsad) found.
FIX: Please install Greenbone Security Assistant.
ERROR: Your GVM-21.4.3 installation is not yet complete!
Before that, I had a problem with the scanner. Libraries were missing - after adding them, checking is better. But I don’t know how to install this GSA.
I tried this, but I can’t get through the “Docker Compose File”.
user@gvm:/usr/local/bin$ docker compose version
Docker Compose version v2.6.0
user@gvm:~/greenbone-community-container$ cd $DOWNLOAD_DIR && curl -f -L https://greenbone.github.io/docs/latest/_static/docker-compose-22.4.yml -o docker-compose.yml
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 4248 100 4248 0 0 30862 0 --:--:-- --:--:-- --:--:-- 31007
user@gvm:~/greenbone-community-container$ docker-compose -f $DOWNLOAD_DIR/docker-compose.yml -p greenbone-community-edition pull
/usr/local/bin/docker-compose: line 1: Not: command not found
user@gvm:~/greenbone-community-container$ docker-compose -f $DOWNLOAD_DIR/docker-compose.yml -p greenbone-community-edition up -d
/usr/local/bin/docker-compose: line 1: Not: command not found
Edit: Maybe it was problem with Ubuntu version. Too many missing package messages. I went back to version 20.04 and it looks like it installs more smoothly. I’ll let you know when it ends.
Looks like the gvm package (which is getting pulled in when installing the openvas package) on Ubuntu 22.04 is depending on a non-existent greenbone-security-assistant package:
This means that you will never get a working GSA installation by just using the packages provided by Ubuntu 22.04 directly (only the upcoming Ubuntu kinetic seems to provide the Ubuntu – Details of package gsad in kinetic replacement package) and not sure if you can compile the missing gsa and gsad on top of these manually.
It seems to be the packages for the Greenbone Community Edition aka GVM/OpenVAS are very broken and nearly useless. You could take a look at our docs (Greenbone Community Documentation) to build our software from source or use docker containers instead.
