search

greenbone / docs

Documentation for the Greenbone Community Edition
https://greenbone.github.io/docs/
Creative Commons Attribution Share Alike 4.0 International
23 stars 32 forks source link

Rollback MQTT removal - Add MQTT installation and config back into source code build guide #475

Closed syspect-sec closed 1 month ago

syspect-sec commented 4 months ago

What

MQTT installation and configuration was removed from the source code build guide, but it is still required until further changes to ospd-openvas.

References

https://forum.greenbone.net/t/openvas-executable-not-available/17944

Checklist

nichtsfrei commented 4 months ago

As of version 22.7.1 ospd-openvas does check if openvasd_server is configured within openvas and if so disables MQTT. This is also mentioned in the documentation with the step:

printf "openvasd_server = http://127.0.0.1:3000\n" | sudo tee -a /etc/openvas/openvas.conf

in https://greenbone.github.io/docs/latest/22.4/source-build/index.html#openvas-scanner.

From that understanding I fail to see why the MQTT installation and configuration should be added to the documentation.

The linked reference has the issue that ospd-openvas is not able to find the executable openvas in PATH.

cfi-gb commented 1 month ago

As of version 22.7.1 ospd-openvas does check if openvasd_server is configured within openvas and if so disables MQTT.

It has been pointed out in https://forum.greenbone.net/t/the-version-of-ospd-openvas-in-community-doc-is-error/18761 that this might be the culprit.

As of today the documentation in https://greenbone.github.io/docs/latest/22.4/source-build/index.html#ospd-openvas is telling the user to install an older 22.6.2 version:

export OSPD_OPENVAS_VERSION=22.6.2

Could this be closed and the versions like above bumped to the most recent version instead to solve this?

k-schlosser commented 1 month ago

Could this be closed and the versions like above bumped to the most recent version instead to solve this?

I opened #494 to address this.

Let me know if this means that this PR (#475) can be closed.

cfi-gb commented 1 month ago

Unfortunately i'm not able to tell if this is actually solving the problem, only forwarded this info (which now also ended up in #492) from another user.

Not sure as well if only bumping the version of ospd-openvas should be done, seems all versions haven't been bumped in the docs since quite some while (e.g. gsad is at 22.9.0 from January 2024 with three releases in between and the current version gsad 22.11.0).

k-schlosser commented 1 month ago

Closing here because the versions of ospd-openvas and openvas-scanner have been bumped to the most recent versions, see #494