GVM Docker: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(2 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
−
=Verzeichnis und Compse Datei erstellen=
+
=Verzeichnis erstellen=
−
<syntaxhighlight lang="bash">
+
mkdir ~/gvm
−
mkdir ~/gvm
+
=Ins Verzeichnis wechseln=
−
cd ~/gvm
+
cd ~/gvm
−
vi docker-compose.yaml
+
=Dockercompose File ziehen=
−
</syntaxhighlight>
+
wget https://greenbone.github.io/docs/latest/_static/docker-compose.yml
−
 
 
−
<syntaxhighlight lang="yaml">
 
−
name: greenbone-community-edition
 
−
 
 
−
services:
 
−
  vulnerability-tests:
 
−
    image: registry.community.greenbone.net/community/vulnerability-tests
 
−
    environment:
 
−
      FEED_RELEASE: "24.10"
 
−
    volumes:
 
−
      - ./data/vt_data_vol:/mnt
 
−
 
 
−
  notus-data:
 
−
    image: registry.community.greenbone.net/community/notus-data
 
−
    volumes:
 
−
      - ./data/notus_data_vol:/mnt
 
−
 
 
−
  scap-data:
 
−
    image: registry.community.greenbone.net/community/scap-data
 
−
    volumes:
 
−
      - ./data/scap_data_vol:/mnt
 
−
 
 
−
  cert-bund-data:
 
−
    image: registry.community.greenbone.net/community/cert-bund-data
 
−
    volumes:
 
−
      - ./data/cert_data_vol:/mnt
 
−
 
 
−
  dfn-cert-data:
 
−
    image: registry.community.greenbone.net/community/dfn-cert-data
 
−
    volumes:
 
−
      - ./data/cert_data_vol:/mnt
 
−
    depends_on:
 
−
      - cert-bund-data
 
−
 
 
−
  data-objects:
 
−
    image: registry.community.greenbone.net/community/data-objects
 
−
    environment:
 
−
      FEED_RELEASE: "24.10"
 
−
    volumes:
 
−
      - ./data/data_objects_vol:/mnt
 
−
 
 
−
  report-formats:
 
−
    image: registry.community.greenbone.net/community/report-formats
 
−
    environment:
 
−
      FEED_RELEASE: "24.10"
 
−
    volumes:
 
−
      - ./data/data_objects_vol:/mnt
 
−
    depends_on:
 
−
      - data-objects
 
−
 
 
−
  gpg-data:
 
−
    image: registry.community.greenbone.net/community/gpg-data
 
−
    volumes:
 
−
      - ./data/gpg_data_vol:/mnt
 
−
 
 
−
  redis-server:
 
−
    image: registry.community.greenbone.net/community/redis-server
 
−
    restart: on-failure
 
−
    volumes:
 
−
      - ./data/redis_socket_vol:/run/redis/
 
−
 
 
−
  pg-gvm:
 
−
    image: registry.community.greenbone.net/community/pg-gvm:stable
 
−
    restart: on-failure
 
−
    volumes:
 
−
      - ./data/psql_data_vol:/var/lib/postgresql
 
−
      - ./data/psql_socket_vol:/var/run/postgresql
 
−
 
 
−
  gvmd:
 
−
    image: registry.community.greenbone.net/community/gvmd:stable
 
−
    restart: on-failure
 
−
    volumes:
 
−
      - ./data/gvmd_data_vol:/var/lib/gvm
 
−
      - ./data/scap_data_vol:/var/lib/gvm/scap-data/
 
−
      - ./data/cert_data_vol:/var/lib/gvm/cert-data
 
−
      - ./data/data_objects_vol:/var/lib/gvm/data-objects/gvmd
 
−
      - ./data/vt_data_vol:/var/lib/openvas/plugins
 
−
      - ./data/psql_data_vol:/var/lib/postgresql
 
−
      - ./data/gvmd_socket_vol:/run/gvmd
 
−
      - ./data/ospd_openvas_socket_vol:/run/ospd
 
−
      - ./data/psql_socket_vol:/var/run/postgresql
 
−
    depends_on:
 
−
      pg-gvm:
 
−
        condition: service_started
 
−
      scap-data:
 
−
        condition: service_completed_successfully
 
−
      cert-bund-data:
 
−
        condition: service_completed_successfully
 
−
      dfn-cert-data:
 
−
        condition: service_completed_successfully
 
−
      data-objects:
 
−
        condition: service_completed_successfully
 
−
      report-formats:
 
−
        condition: service_completed_successfully
 
−
 
 
−
  gsa:
 
−
    image: registry.community.greenbone.net/community/gsa:stable
 
−
    restart: on-failure
 
−
    ports:
 
−
      - 127.0.0.1:9392:80
 
−
    volumes:
 
−
      - ./data/gvmd_socket_vol:/run/gvmd
 
−
    depends_on:
 
−
      - gvmd
 
−
 
 
−
  configure-openvas:
 
−
    image: registry.community.greenbone.net/community/openvas-scanner:stable
 
−
    volumes:
 
−
      - ./data/openvas_data_vol:/mnt
 
−
      - ./data/openvas_log_data_vol:/var/log/openvas
 
−
    command:
 
−
      - /bin/sh
 
−
      - -c
 
−
      - |
 
−
        printf "table_driven_lsc = yes\nopenvasd_server = http://openvasd:80\n" > /mnt/openvas.conf
 
−
        sed "s/127/128/" /etc/openvas/openvas_log.conf | sed 's/gvm/openvas/' > /mnt/openvas_log.conf
 
−
        chmod 644 /mnt/openvas.conf
 
−
        chmod 644 /mnt/openvas_log.conf
 
−
        touch /var/log/openvas/openvas.log
 
−
        chmod 666 /var/log/openvas/openvas.log
 
−
 
 
−
  openvas:
 
−
    image: registry.community.greenbone.net/community/openvas-scanner:stable
 
−
    restart: on-failure
 
−
    volumes:
 
−
      - ./data/openvas_data_vol:/etc/openvas
 
−
      - ./data/openvas_log_data_vol:/var/log/openvas
 
−
    command:
 
−
      - /bin/sh
 
−
      - -c
 
−
      - |
 
−
        cat /etc/openvas/openvas.conf
 
−
        tail -f /var/log/openvas/openvas.log
 
−
    depends_on:
 
−
      configure-openvas:
 
−
        condition: service_completed_successfully
 
−
 
 
−
  openvasd:
 
−
    image: registry.community.greenbone.net/community/openvas-scanner:stable
 
−
    restart: on-failure
 
−
    environment:
 
−
      OPENVASD_MODE: service_notus
 
−
      GNUPGHOME: /etc/openvas/gnupg
 
−
      LISTENING: 0.0.0.0:80
 
−
    volumes:
 
−
      - ./data/openvas_data_vol:/etc/openvas
 
−
      - ./data/openvas_log_data_vol:/var/log/openvas
 
−
      - ./data/gpg_data_vol:/etc/openvas/gnupg
 
−
      - ./data/notus_data_vol:/var/lib/notus
 
−
    depends_on:
 
−
      vulnerability-tests:
 
−
        condition: service_completed_successfully
 
−
      configure-openvas:
 
−
        condition: service_completed_successfully
 
−
      gpg-data:
 
−
        condition: service_completed_successfully
 
−
    networks:
 
−
      default:
 
−
        aliases:
 
−
          - openvasd
 
−
 
 
−
  ospd-openvas:
 
−
    image: registry.community.greenbone.net/community/ospd-openvas:stable
 
−
    restart: on-failure
 
−
    hostname: ospd-openvas.local
 
−
    cap_add:
 
−
      - NET_ADMIN
 
−
      - NET_RAW
 
−
    security_opt:
 
−
      - seccomp=unconfined
 
−
      - apparmor=unconfined
 
−
    command:
 
−
      [
 
−
        "ospd-openvas",
 
−
        "-f",
 
−
        "--config",
 
−
        "/etc/gvm/ospd-openvas.conf",
 
−
        "--notus-feed-dir",
 
−
        "/var/lib/notus/advisories",
 
−
        "-m",
 
−
        "666",
 
−
      ]
 
−
    volumes:
 
−
      - ./data/gpg_data_vol:/etc/openvas/gnupg
 
−
      - ./data/vt_data_vol:/var/lib/openvas/plugins
 
−
      - ./data/notus_data_vol:/var/lib/notus
 
−
      - ./data/ospd_openvas_socket_vol:/run/ospd
 
−
      - ./data/redis_socket_vol:/run/redis/
 
−
      - ./data/openvas_data_vol:/etc/openvas/
 
−
      - ./data/openvas_log_data_vol:/var/log/openvas
 
−
    depends_on:
 
−
      redis-server:
 
−
        condition: service_started
 
−
      gpg-data:
 
−
        condition: service_completed_successfully
 
−
      vulnerability-tests:
 
−
        condition: service_completed_successfully
 
−
      configure-openvas:
 
−
        condition: service_completed_successfully
 
−
 
 
−
  gvm-tools:
 
−
    image: registry.community.greenbone.net/community/gvm-tools
 
−
    volumes:
 
−
      - ./data/gvmd_socket_vol:/run/gvmd
 
−
      - ./data/ospd_openvas_socket_vol:/run/ospd
 
−
    depends_on:
 
−
      - gvmd
 
−
      - ospd-openvas
 
−
</syntaxhighlight>
 
 
=Starten=
 
=Starten=
 
  docker compose up -d
 
  docker compose up -d
 
=Passwort ändern=
 
=Passwort ändern=
 +
docker compose exec -u gvmd gvmd gvmd --user=admin --new-password='123Start$'
 +
=Kontrolle=
 +
docker compose logs -f
 +
=Warten=
 +
*Es braucht eine Zeit bis alles runtergeladen und in die Datenbank verfrachtet ist.
 +
=Start Skript zum fixen=
 +
*cat start-gvm.sh
 +
<pre>
 +
#!/bin/bash
  
 +
echo "[*] Stoppe Greenbone Umgebung..."
 +
docker compose down
 +
sleep 2
  
 +
echo "[*] Starte PostgreSQL, Redis, Scanner..."
 +
docker compose up -d pg-gvm redis-server ospd-openvas
 +
echo "[*] Warten auf Scanner-Socket..."
 +
sleep 25
  
 +
echo "[*] Starte gvmd (Manager) und gsa (Web-GUI)..."
 +
docker compose up -d gvmd gsa
  
 +
echo "[*] Prüfe Scanner-Verbindung..."
 +
sleep 5
 +
docker compose exec --user gvmd gvmd gvmd --get-scanners
 +
</pre>
  
−
 
+
=Einloggen=
−
 
+
http://127.0.0.1:
 +
=Links=
 
*https://greenbone.github.io/docs/latest/22.4/container/index.html
 
*https://greenbone.github.io/docs/latest/22.4/container/index.html

Aktuelle Version vom 5. Juli 2025, 09:36 Uhr

Verzeichnis erstellen

mkdir ~/gvm

Ins Verzeichnis wechseln

cd ~/gvm

Dockercompose File ziehen

wget https://greenbone.github.io/docs/latest/_static/docker-compose.yml

Starten

docker compose up -d

Passwort ändern

docker compose exec -u gvmd gvmd gvmd --user=admin --new-password='123Start$'

Kontrolle

docker compose logs -f

Warten

  • Es braucht eine Zeit bis alles runtergeladen und in die Datenbank verfrachtet ist.

Start Skript zum fixen

  • cat start-gvm.sh
#!/bin/bash

echo "[*] Stoppe Greenbone Umgebung..."
docker compose down
sleep 2

echo "[*] Starte PostgreSQL, Redis, Scanner..."
docker compose up -d pg-gvm redis-server ospd-openvas
echo "[*] Warten auf Scanner-Socket..."
sleep 25

echo "[*] Starte gvmd (Manager) und gsa (Web-GUI)..."
docker compose up -d gvmd gsa

echo "[*] Prüfe Scanner-Verbindung..."
sleep 5
docker compose exec --user gvmd gvmd gvmd --get-scanners

Einloggen

http://127.0.0.1:

Links

Abgerufen von „http://wiki.ixheim.de/index.php?title=GVM_Docker&oldid=63672“