GVM-Docker

This is a GVM (OpenVAS) Docker image intended for one-off scans.

Docker Hub

https://hub.docker.com/repository/docker/jeffleder/gvm-docker

Deployment

1. Install Docker (see https://docs.docker.com/engine/install/debian/ for debian)
2. Create a volume to store persistent data

   docker volume create openvas

3. Run the container

   docker run --detach --publish 127.0.0.1:9392:9392 -e USERNAME="admin" -e PASSWORD="admin" --volume openvas:/data --name openvas --restart unless-stopped jeffleder/gvm-docker

   Deployment Notes

   • The --detach switch will run the container in a detached state
   • The --publish 127.0.0.1:9392:9392 switch will forward host port 9392 to container port 9392 (the GSA web GUI port)
   • You can change the host port from 9392 to any available port that you'd like (e.g. 8080)
   • The 127.0.0.1 part of the switch will force GSA to only listen for localhost connections
   • The -e USERNAME="admin" switch allows you to specify a username to log into the GSAD web GUI with
   • The -e PASSWORD="admin" switch allows you to specify a password to log into the GSAD web GUI with
   • The --volume switch specifies the volume to use for persistent data
   • The --name switch allows you to specify whatever freindly name you want for the container (this guide uses openvas throughout)
   • The --restart unless-stopped switch daemonizes the container (so it will restart on crash and/or system reboots)
   • The last jeffleder/gvm-docker item specifies the image to pull and run for the container

Deployment Status Checks

You can verify that the container has completed loading by running:

docker logs openvas

If you see Your GVM container is now ready to use!, the container is ready to go.

Accessing the Web GUI

Access the web interface from the docker host via http://127.0.0.1:9392 Default Credentials:

Username: admin
Password: admin

Monitoring Scan Progress

This command will show you the GVM processes running inside the container:

docker top openvas

Checking the GVM Logs

All the logs from /var/log/gvm/* can be viewed by running:

docker logs openvas

Updating NVT/SCAP/CERT Data

Autobuilds bake NVT/SCAP/CERT Data into the DockerHub image so that the latest build has the most recent feeds