这篇文章上次修改于 1667 天前，可能其部分内容已经发生变化，如有疑问可询问作者。 ###0x0说明 镜像来自[immauss](https://hub.docker.com/r/immauss/openvas "immauss")作者的docker镜像，基于GVM 20.08.1，这个版本自己也在ubuntu下安装过，所含组件： >gvmd - Greenbone 漏洞管理守护进程 >openvas Scanner - GVM 的扫描仪组件 >ospd - openvas 扫描器协议守护进程 >postgresql - 扫描仪和 gvm 的数据库后端 >redis - gvmd 使用的内存数据库存储 >用于从 GVM 发送电子邮件通知的 postfix 邮件服务器 >基线数据馈送和相关数据库的副本 >从现有的 postgresql 数据库转储中恢复的选项 >启动时跳过数据同步的选项 >在容器停止时正确关闭数据库以防止数据库损坏。（这是>在 20.08.04.4 中添加的） ###0x2安装部署 如果是kali或者ubuntu，可以使用docker.io包 ````shell apt install docker.io ``` 或者使用一键安装脚本： ```shell curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun docker pull immauss/openvas #默认端口9392 docker run -p 9392:9392 -d immauss/openvas ``` 作者给的拉取和运行步骤： ```shell #如果不用持久存储卷的话 docker run --detach --publish 8080:9392 -e PASSWORD="Your admin password here" --name openvas immauss/openvas 使用持久存储卷 docker volume create openvas docker run --detach --publish 8080:9392 -e PASSWORD="Your admin password here" --volume openvas:/data --name openvas immauss/openvas #数据库备份 docker exec -it <container name> su -c "/usr/lib/postgresql/12/bin/pg_dumpall" postgres > db-backup-file.sql #数据库恢复 docker run -it -e RESTORE=true -v <path to backupfile>:/usr/lib/db-backup.sql --rm -v openvas:/data immauss/openvas ``` 启动后，NVT等插件库全部自动更新完成后，即可访问： ```shell md manage: INFO:2022-04-08 06h52.42 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/c/oval.xml md manage: INFO:2022-04-08 06h52.43 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/m/oval.xml md manage: INFO:2022-04-08 06h52.43 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/ios.xml md manage: INFO:2022-04-08 06h52.43 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/pixos.xml md manage: INFO:2022-04-08 06h52.43 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/p/oval.xml md manage: INFO:2022-04-08 06h54.05 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/i/oval.xml md manage: INFO:2022-04-08 06h54.07 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/macos.xml md manage: INFO:2022-04-08 06h54.07 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/unix.xml md manage: INFO:2022-04-08 06h54.11 UTC:395: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/windows.xml md manage: INFO:2022-04-08 06h54.16 UTC:395: Updating user OVAL definitions. md manage: INFO:2022-04-08 06h54.16 UTC:395: Updating CVSS scores and CVE counts for CPEs md manage: INFO:2022-04-08 06h55.29 UTC:395: Updating CVSS scores for OVAL definitions md manage: INFO:2022-04-08 06h55.30 UTC:395: Updating placeholder CPEs md manage: INFO:2022-04-08 06h55.49 UTC:395: Updating Max CVSS for DFN-CERT md manage: INFO:2022-04-08 06h55.52 UTC:395: Updating DFN-CERT CVSS max succeeded. md manage: INFO:2022-04-08 06h55.52 UTC:395: Updating Max CVSS for CERT-Bund md manage: INFO:2022-04-08 06h55.53 UTC:395: Updating CERT-Bund CVSS max succeeded. md manage: INFO:2022-04-08 06h55.55 UTC:395: update_scap_end: Updating SCAP info succeeded md manage: INFO:2022-04-08 06h56.06 UTC:713: OSP service has different VT status (version 202204071010) from database (version 202203281001, 96256 VTs). Starting update ... md manage: INFO:2022-04-08 06h57.43 utc:713: Updating VTs in database ... 210 new VTs, 2808 changed VTs md manage:WARNING:2022-04-08 06h57.44 utc:713: update_nvts_from_vts: SHA-256 hash of the VTs in the database (ed7829e944f3599328a80cac75b5bd836a6edc3042441c6094045b9ae2c9e587) does not match the one from the scanner (e92cdb879c654e32e97d1c9da041ec87e0624deaf690ad7c30ba28fdb88550c0). md main:MESSAGE:2022-04-08 06h57.44 utc:713: Rebuilding all NVTs because of a hash value mismatch md manage: INFO:2022-04-08 07h05.17 utc:713: Updating VTs in database ... 96579 new VTs, 0 changed VTs md manage: INFO:2022-04-08 07h05.19 utc:713: Updating VTs in database ... done (96579 VTs). md main:MESSAGE:2022-04-08 07h06.00 utc:713: update_nvt_cache_retry: rebuild successful ```  
没有评论