greenbone / gvmd

Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
GNU Affero General Public License v3.0
290 stars 157 forks source link

Failed to get all of NVT's using docker-compose latest containers #2308

Closed tenaz3 closed 1 month ago

tenaz3 commented 1 month ago

Expected behavior

I would expect gvmd would get all and latests NVT's possible. Usually it's around 140k NVT's

Actual behavior

I only got around 60k NVT's

Steps to reproduce

  1. Using the docker-compose of https://greenbone.github.io/docs/latest/22.4/container/index.html
  2. When run the container and open GSA I got the NVT's

If I follow the: https://greenbone.github.io/docs/latest/22.4/container/workflows.html#downloading-the-feed-changes then I get the expected NVT's. But I would like to have them all in one step. See the images before and after that step

registry.community.greenbone.net/community/vulnerability-tests  latest      32027d1e20e2  29 hours ago  1.13 GB
registry.community.greenbone.net/community/vulnerability-tests  latest      0935de33ca55  7 hours ago   1.13 GB

registry.community.greenbone.net/community/notus-data           latest      5f34cc6dc11e  23 hours ago  27.6 MB
registry.community.greenbone.net/community/notus-data           latest      9b6f2ff6267f  9 hours ago   27.6 MB

registry.community.greenbone.net/community/scap-data            latest      d101b5ccbeab  32 hours ago  98.1 MB
registry.community.greenbone.net/community/scap-data            latest      a3bfa1732245  8 hours ago   98.2 MB

registry.community.greenbone.net/community/data-objects         latest      778a2a7633cd  32 hours ago  28.9 MB
registry.community.greenbone.net/community/data-objects         latest      c5d412b3741d  8 hours ago   28.9 MB

registry.community.greenbone.net/community/cert-bund-data       latest      4ff1c1114a68  33 hours ago  87.1 MB
registry.community.greenbone.net/community/cert-bund-data       latest      ef1225205815  9 hours ago   87.7 MB

registry.community.greenbone.net/community/report-formats       latest      c20dc378ba8e  11 days ago   5.6 MB
registry.community.greenbone.net/community/report-formats       latest      c20dc378ba8e  11 days ago   5.6 MB

registry.community.greenbone.net/community/dfn-cert-data        latest      78a09999e8a7  33 hours ago  49 MB
registry.community.greenbone.net/community/dfn-cert-data        latest      592347f7c2f2  9 hours ago   49 MB

GVM versions

gsa: (gsad --version) latest gvm: (gvmd --version) latest openvas-scanner: (openvas --version) latest gvm-libs: latest

Environment

Operating system: centOS

Installation method / source: (packages, source installation)

Logfiles

User exists already.
starting gvmd
md   main:MESSAGE:2024-10-11 14h38.21 utc:44:    Greenbone Vulnerability Manager version 23.10.0 (DB revision 256)
md   main:   INFO:2024-10-11 14h38.21 utc:44:    Migrating database.
md   main:   INFO:2024-10-11 14h38.21 utc:44: gvmd: databases are already at the supported version
md   main:MESSAGE:2024-10-11 14h38.21 utc:45:    Greenbone Vulnerability Manager version 23.10.0 (DB revision 256)
md manage:   INFO:2024-10-11 14h38.21 utc:45:    Creating user.
md   main:MESSAGE:2024-10-11 14h38.25 utc:47:    Greenbone Vulnerability Manager version 23.10.0 (DB revision 256)
md manage:   INFO:2024-10-11 14h38.25 utc:47:    Getting users.
md   main:MESSAGE:2024-10-11 14h38.27 utc:50:    Greenbone Vulnerability Manager version 23.10.0 (DB revision 256)
md manage:   INFO:2024-10-11 14h38.27 utc:50:    Modifying setting.
md   main:MESSAGE:2024-10-11 14h38.28 utc:51:    Greenbone Vulnerability Manager version 23.10.0 (DB revision 256)
md manage:   INFO:2024-10-11 14h38.29 utc:70: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-10-11 14h38.39 utc:71: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-10-11 14h38.49 utc:72: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-10-11 14h38.59 utc:73: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-10-11 14h39.10 utc:74: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-10-11 14h39.20 utc:75: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
md manage:   INFO:2024-10-11 14h39.30 utc:76: osp_scanner_feed_version: No feed version available yet. OSPd OpenVAS is still starting
cfi-gb commented 1 month ago

This probably can be closed as "invalid" as it seems to be a Podman specific setup / configuration issue:

The podman-compose implementation does not fully supports the depends_on and the gvmd relies on the ospd-openvas, therefore you must wait for it. Then the NVT’s are sync correctly.

https://forum.greenbone.net/t/number-of-nvts-in-feed/19413/6

tenaz3 commented 1 month ago

Yes I managed to fix, but just for you information, gvmd MUST depends on ospd-openvas. I am not sure if docker gets by coincidence or other reasons. Maybe worth to add on the community docker-compose.

cfi-gb commented 1 month ago

AFAICT the docker-compose is maintained at https://github.com/greenbone/docs/blob/main/src/_static/docker-compose-22.4.yml, if there is something missing or should be added AFAICT a new https://github.com/greenbone/docs/issues could be created.