GVM Installation: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(→setup) |
|||
| Zeile 1: | Zeile 1: | ||
=Install= | =Install= | ||
*apt update ; apt install -y gvm | *apt update ; apt install -y gvm | ||
| − | + | =Setup= | |
| − | = | ||
*gvm-setup | *gvm-setup | ||
*[[gvm-setup Probleme]] | *[[gvm-setup Probleme]] | ||
| − | |||
=Finish= | =Finish= | ||
<pre> | <pre> | ||
| Zeile 13: | Zeile 11: | ||
User created with password '4dxxxx7-exx9-4xx4-axxc-6xxxx20xxx2'. | User created with password '4dxxxx7-exx9-4xx4-axxc-6xxxx20xxx2'. | ||
</pre> | </pre> | ||
| − | = | + | =Start= |
*gvm-start | *gvm-start | ||
| − | = | + | =Stop= |
*gvm-stop | *gvm-stop | ||
;ADD ONS | ;ADD ONS | ||
| − | + | =Daemon reload= | |
| − | = | ||
*systemctl daemon-reload | *systemctl daemon-reload | ||
*gvm-stop | *gvm-stop | ||
*gvm-start | *gvm-start | ||
*gvm-check-setup --server | *gvm-check-setup --server | ||
| − | |||
=Login= | =Login= | ||
*URL: https://<FQDN>:9392 | *URL: https://<FQDN>:9392 | ||
*USR: admin | *USR: admin | ||
*PWD: 4dxxxx7-exx9-4xx4-axxc-6xxxx20xxx2 | *PWD: 4dxxxx7-exx9-4xx4-axxc-6xxxx20xxx2 | ||
| − | |||
=Passwort ändern= | =Passwort ändern= | ||
*su - _gvm -s /bin/bash | *su - _gvm -s /bin/bash | ||
*gvmd --user=admin --new-password=123Start$ | *gvmd --user=admin --new-password=123Start$ | ||
| − | |||
=Dafür sorgen das gsad von überall erreichbar ist= | =Dafür sorgen das gsad von überall erreichbar ist= | ||
*sed -e "s/127.0.0.1/0.0.0.0/" /usr/lib/systemd/system/gsad.service > /etc/systemd/system/gsad.service | *sed -e "s/127.0.0.1/0.0.0.0/" /usr/lib/systemd/system/gsad.service > /etc/systemd/system/gsad.service | ||
| − | |||
=Units enablen= | =Units enablen= | ||
*systemctl enable gvmd.service --now | *systemctl enable gvmd.service --now | ||
*systemctl enable ospd-openvas.service --now | *systemctl enable ospd-openvas.service --now | ||
*systemctl enable gsad.service --now | *systemctl enable gsad.service --now | ||
| − | |||
=Updates= | =Updates= | ||
==Cron== | ==Cron== | ||
| − | */etc/cron.d/greenbone | + | */etc/cron.d/greenbone |
<pre> | <pre> | ||
SHELL=/bin/sh | SHELL=/bin/sh | ||
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin | PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin | ||
| − | 0 0 * * * _gvm greenbone-feed-sync --type | + | 0 0 * * * _gvm greenbone-feed-sync --type NASL |
| − | 10 0 * * * _gvm greenbone- | + | 10 0 * * * _gvm greenbone-feed-sync --type NOTUS |
| − | 20 0 * * * _gvm greenbone-feed-sync --type CERT | + | 20 0 * * * _gvm greenbone-feed-sync --type SCAP |
| − | + | 30 0 * * * _gvm greenbone-feed-sync --type CERT | |
| − | + | 40 0 * * * _gvm greenbone-feed-sync --type GVMD_DATA | |
| + | 50 0 * * * root openvas --update-vt-info | ||
</pre> | </pre> | ||
| − | |||
==Manuell== | ==Manuell== | ||
| + | Falls <code>gvm-setup</code> den initialen Feed-Sync nicht sauber abgeschlossen hat (erkennbar an <code>No SCAP database found</code> im Log), einmalig von Hand nachziehen: | ||
| + | ===Schritt 1: Feed-Sync als _gvm=== | ||
*su -s /bin/bash _gvm | *su -s /bin/bash _gvm | ||
| − | + | <pre> | |
| + | greenbone-feed-sync --type NASL | ||
| + | greenbone-feed-sync --type NOTUS | ||
| + | greenbone-feed-sync --type SCAP | ||
| + | greenbone-feed-sync --type CERT | ||
| + | greenbone-feed-sync --type GVMD_DATA | ||
| + | </pre> | ||
| + | ===Schritt 2: Abschluss im Log abwarten=== | ||
| + | *tail -f /var/log/gvm/gvmd.log | ||
| + | Warten bis diese Zeile erscheint: | ||
| + | <pre> | ||
| + | update_scap_end: Updating SCAP info succeeded | ||
| + | </pre> | ||
| + | ===Schritt 3: VT-Info einlesen (als root)=== | ||
| + | *openvas --update-vt-info | ||
| + | Kein Output = normal, dauert einige Minuten. | ||
| + | ===Schritt 4: Neustart=== | ||
| + | *gvm-stop && gvm-start | ||
| + | ===Schritt 5: Kontrolle=== | ||
| + | *tail -f /var/log/gvm/gvmd.log | ||
| + | |||
| + | Erfolgreich wenn diese Zeilen '''nicht''' mehr erscheinen: | ||
| + | <pre> | ||
| + | No SCAP database found | ||
| + | OSP service has different VT status ... version (null) | ||
| + | </pre> | ||
| + | Stattdessen sollte stehen: | ||
| + | <pre> | ||
| + | OSP service has same VT status | ||
| + | </pre> | ||
| + | Ab jetzt übernimmt der Cron automatisch die täglichen Updates. | ||
Version vom 17. Mai 2026, 18:50 Uhr
Install
- apt update ; apt install -y gvm
Setup
- gvm-setup
- gvm-setup Probleme
Finish
... md main: DEBUG:6750:2016-08-15 17h32.43 CEST: sql_open: db open, max retry sleep time is 0 Rebuilding NVT cache... done. User created with password '4dxxxx7-exx9-4xx4-axxc-6xxxx20xxx2'.
Start
- gvm-start
Stop
- gvm-stop
- ADD ONS
Daemon reload
- systemctl daemon-reload
- gvm-stop
- gvm-start
- gvm-check-setup --server
Login
- URL: https://<FQDN>:9392
- USR: admin
- PWD: 4dxxxx7-exx9-4xx4-axxc-6xxxx20xxx2
Passwort ändern
- su - _gvm -s /bin/bash
- gvmd --user=admin --new-password=123Start$
Dafür sorgen das gsad von überall erreichbar ist
- sed -e "s/127.0.0.1/0.0.0.0/" /usr/lib/systemd/system/gsad.service > /etc/systemd/system/gsad.service
Units enablen
- systemctl enable gvmd.service --now
- systemctl enable ospd-openvas.service --now
- systemctl enable gsad.service --now
Updates
Cron
- /etc/cron.d/greenbone
SHELL=/bin/sh PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 0 0 * * * _gvm greenbone-feed-sync --type NASL 10 0 * * * _gvm greenbone-feed-sync --type NOTUS 20 0 * * * _gvm greenbone-feed-sync --type SCAP 30 0 * * * _gvm greenbone-feed-sync --type CERT 40 0 * * * _gvm greenbone-feed-sync --type GVMD_DATA 50 0 * * * root openvas --update-vt-info
Manuell
Falls gvm-setup den initialen Feed-Sync nicht sauber abgeschlossen hat (erkennbar an No SCAP database found im Log), einmalig von Hand nachziehen:
Schritt 1: Feed-Sync als _gvm
- su -s /bin/bash _gvm
greenbone-feed-sync --type NASL greenbone-feed-sync --type NOTUS greenbone-feed-sync --type SCAP greenbone-feed-sync --type CERT greenbone-feed-sync --type GVMD_DATA
Schritt 2: Abschluss im Log abwarten
- tail -f /var/log/gvm/gvmd.log
Warten bis diese Zeile erscheint:
update_scap_end: Updating SCAP info succeeded
Schritt 3: VT-Info einlesen (als root)
- openvas --update-vt-info
Kein Output = normal, dauert einige Minuten.
Schritt 4: Neustart
- gvm-stop && gvm-start
Schritt 5: Kontrolle
- tail -f /var/log/gvm/gvmd.log
Erfolgreich wenn diese Zeilen nicht mehr erscheinen:
No SCAP database found OSP service has different VT status ... version (null)
Stattdessen sollte stehen:
OSP service has same VT status
Ab jetzt übernimmt der Cron automatisch die täglichen Updates.