archerysec icon indicating copy to clipboard operation
archerysec copied to clipboard

docker-compose fails becase of missing avhost/docker-openvas image

Open carldavis opened this issue 4 years ago • 3 comments

docker-compose up fails because of a missing dependency.

Steps to reproduce the behavior:

  1. git clone https://github.com/archerysec/archerysec.git
  2. docker-compose up -d

`Error response from daemon: pull access denied for avhost/docker-openvas, repository does not exist or may require 'docker login': denied: requested access to the resource is denied

Checking https://hub.docker.com/r/avhost/docker-openvas/ returns 404

carldavis avatar Oct 28 '21 17:10 carldavis

got same issue

abejads avatar Nov 11 '21 10:11 abejads

I tried to track down the original repo to build from the Dockerfile and built it myself, but didn't have any luck.

I tried this repo and it appears to be actively maintained and a drop in replacement: https://hub.docker.com/r/immauss/openvas

Still doing testing. Use at your own risk.

mjtechguy avatar Nov 21 '21 17:11 mjtechguy

@mjtechguy have you successfully conntected this docker image as connector?

I tried the following config:

  openvas:
    image: immauss/openvas
    environment:
      - "PASSWORD=admin"
      - "USERNAME=admin"
      - "GMP=9390"    # to enable see docs
      - "HTTPS=false"  # wether to use HTTPS or not
    ports:
      - "9390:9390"
      - "9392:9392"
    expose:
      - "9390"
      - "9392"
    links:
      - archerysec
    container_name: openvas

Also tested with "HTTPS=true" but no luck at all. Connector always stays at not connected.

schniggie avatar Aug 20 '22 23:08 schniggie

Hi,

We are currently stuck at the same stage as @schniggie .

Did anyone ever get this working?

fresaelens avatar Oct 21 '22 10:10 fresaelens

same issuse! Anyone help me please?

ladung avatar Jan 09 '23 08:01 ladung

Still not fixed yet

naserexe avatar Apr 11 '23 12:04 naserexe

I've jumped in to the archerysec container and done some troubleshooting in order to try to get immauss/openvas working. It looks like it's due to openvas_lib not supporting OpenVAS >v9.

(venv) root@85a7606a9562:/home/archerysec/app/scanners/scanner_plugin/network_scanner# python3 test.py 
Error:
Invalid OpenVAS version in remote server.

So I see two options:

  1. Try to put together a patch for openvas_lib to support newer version of OMP (now known as GMP), such as v22.4 that immauss/openvas uses (as it's using the latest release of OpenVAS). Or,
  2. Move to the offical python-gvm.

Using python-gvm might cause backwards-compatibility issues, but it's more likely to see these newer version of OpenVAS than version 6/7/8/9.

MitchDrage avatar Sep 25 '23 05:09 MitchDrage

I managed to get this partially working with this image: mikesplain/openvas

    image: mikesplain/openvas
    ports:
      - "443:443"
      - "9390:9390"
      - "9392:9392"
    expose:
      - "9390"
      - "9392"
      - "443"
    volumes:
      - "./openvas_data:/var/lib/openvas/mgr/"
    links:
      - archerysec
    container_name: openvas

williamchalmers avatar Oct 14 '23 11:10 williamchalmers