Greenbone Vulnerability Management¶

About¶

This is a Docker Image of Greenbone Vulnerability Management (GVM)

See https://github.com/greenbone for more details.

Config examples¶

docker-compose.yaml¶

services:
  gvm:
    image: virsacer/gvm
    restart: always
    shm_size: 1G
    ports:
      - "9443:9443"
      - "9390:9390"
    volumes:
      - "/etc/localtime:/etc/localtime:ro"
      - "./:/gvm/var/lib/gvm"
      - "./:/gvm/var/lib/openvas"
      - "./notus:/gvm/var/lib/notus"
      - "./pgsql-conf:/etc/postgresql/15/gvm"
      - "./pgsql-data:/var/lib/postgresql/15/gvm"
      - "./msmtprc:/etc/msmtprc"

msmtprc¶

host 172.17.0.1
port 25
tls on
tls_certcheck off
auth on
user mailuser
password mailpassword

Apache proxy¶

Using subdirectories is supported:

ProxyPass /GVM https://127.0.0.1:9443
ProxyPass /gmp https://127.0.0.1:9443/gmp
ProxyPassReverse /GVM https://127.0.0.1:9443
RedirectMatch ^/GVM$ /GVM/

SSL¶

Copy/Move the Cert to /gvm/var/lib/gvm/gsad.crt and the Key to /gvm/var/lib/gvm/gsad.key

Default Login¶

Username: admin
Password: admin

Update Feeds¶

docker exec -d gvm_container_name bash -c "/update-gvm"

Backup¶

docker exec -d gvm_container_name bash -c "pg_dump gvmd > /gvm/var/lib/gvm/backup.sql" > /dev/null

Restore¶

Copy/Move backup.sql to /gvm/var/lib/gvm/restore.sql + Restart

Optimize Database¶

docker exec -d gvm_container_name bash -c "/optimize-gvm"

Cleanup (Identifiers of deleted reports)¶

docker exec -d gvm_container_name bash -c "/cleanup-gvm"

Migration¶

22.04 -> 22.9¶

Export database for restore on next start docker exec -d gvm_container_name bash -c "pg_dump gvmd > /gvm/var/lib/gvm/restore.sql" > /dev/null

Stop/Remove old container + Update your volumes-paths + Start

21.04 -> 22.04¶

Export database for restore on next start docker exec -d gvm_container_name bash -c "pg_dump gvmd > /gvm/var/lib/gvm/restore.sql" > /dev/null

Stop/Remove old container + Update your volumes-paths + Start

20.08 -> 21.04¶

Just start.

If NVTs are not rebuilt automatically run docker exec -d gvm_container_name gvmd --rebuild

11.0 -> 20.08¶

The Postgres version has changed from 12 to 11 because of switch from Ubuntu to Debian.

Export database for restore on next start docker exec -d gvm_container_name bash -c "pg_dump gvmd > /gvm/var/lib/gvm/restore.sql" > /dev/null

Stop/Remove old container + Update your postgres-volumes-paths + Start

10.0 -> 11.0¶

Copy/Move database to /gvm/var/lib/gvm/migrate.db + Start

9.0 (OpenVAS) -> 10.0¶

Update database by running docker run -it --rm -v "$PWD:/gvm" virsacer/gvm:migration

Disclaimer¶

Use the images at your own risk.