Skip to content

Commit 9e5c86e

Browse files
committed
Change: Update Install docs for Debian stable
* Use to use Debian stable (bookworm) * Fix formatting * Sort dependencies * Use `postgresql-server-dev-all` as version independent package
1 parent b294277 commit 9e5c86e

File tree

1 file changed

+54
-34
lines changed

1 file changed

+54
-34
lines changed

INSTALL.md

+54-34
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,54 @@
1-
# INSTALLATION INSTRUCTIONS FOR GREENBONE VULNERABILITY MANAGER
1+
# Installation Instructions for Greenbone Vulnerability Manager Daemon
22

33
Please note: The reference system used by most of the developers is Debian
4-
GNU/Linux 'Buster' 10. The build might fail on any other system. Also, it is
5-
necessary to install dependent development packages.
4+
stable. The build might fail on any other system. Also, it is necessary to
5+
install dependent development packages.
66

7-
## Prerequisites for Greenbone Vulnerability Manager
7+
## Prerequisites for Greenbone Vulnerability Manager Daemon
88

99
Prerequisites:
10-
* GCC (Debian package: gcc)
11-
* cmake >= 3.0 (Debian package: cmake)
12-
* cJSON >= 1.7.14 (Debian package: libcjson-dev)
13-
* glib-2.0 >= 2.42 (Debian package: libglib2.0-dev)
14-
* gnutls >= 3.2.15 (Debian package: libgnutls28-dev)
15-
* libgvm_base, libgvm_util, libgvm_osp, libgvm_gmp >= 20.08.0 ([gvm-libs](https://github.com/greenbone/gvm-libs/tree/gvm-libs-20.08) component)
16-
* PostgreSQL database >= 9.6 (Debian packages: libpq-dev postgresql-server-dev-11)
17-
* pkg-config (Debian package: pkg-config)
18-
* libical >= 1.0.0 (Debian package: libical-dev)
19-
* xsltproc (Debian package: xsltproc)
20-
* gpgme
2110

22-
Install these prerequisites on Debian GNU/Linux 'Buster' 10:
11+
* cJSON >= 1.7.14
12+
* cmake >= 3.0
13+
* GCC
14+
* glib-2.0 >= 2.42
15+
* gnutls >= 3.2.15
16+
* gpgme
17+
* [gvm-libs](https://github.com/greenbone/gvm-libs/) >= 22.12
18+
* libical >= 1.0.0
19+
* libbsd
20+
* pkg-config
21+
* PostgreSQL database >= 9.6
22+
* xsltproc
2323

24-
apt-get install gcc cmake libcjson-dev libglib2.0-dev libgnutls28-dev libpq-dev postgresql-server-dev-11 pkg-config libical-dev xsltproc libgpgme-dev
24+
Install these prerequisites on Debian stable:
25+
26+
apt-get install \
27+
cmake \
28+
gcc \
29+
libcjson-dev \
30+
libglib2.0-dev \
31+
libgnutls28-dev \
32+
libgpgme-dev \
33+
libical-dev \
34+
libpq-dev \
35+
pkg-config \
36+
postgresql-server-dev-all \
37+
xsltproc
2538

2639
Prerequisites for building documentation:
40+
2741
* Doxygen
2842
* xsltproc (for building the GMP HTML documentation)
2943
* xmltoman (optional, for building man page)
3044

3145
Prerequisites for building tests:
46+
3247
* Cgreen (optional, for building tests)
3348

3449
Please see the section "Prerequisites for Optional Features" below additional
3550
optional prerequisites.
3651

37-
3852
## Compiling Greenbone Vulnerability Manager
3953

4054
If you have installed required libraries to a non-standard location, remember to
@@ -73,7 +87,6 @@ you have specified a prefix for which your user does not have full permissions.
7387
To clean up the build environment, simply remove the contents of the `build`
7488
directory you created above.
7589

76-
7790
## Choosing the Connection Type
7891

7992
Greenbone Vulnerability Manager can serve client connections on either a TCP
@@ -91,7 +104,6 @@ To use a TCP socket, call gvmd with the --listen option, for example:
91104

92105
gvmd --listen=127.0.0.1
93106

94-
95107
## Certificate Generation
96108

97109
All TCP-based communication with Greenbone Vulnerability Manager uses the TLS
@@ -116,7 +128,6 @@ If certificates have expired or in other ways there is need to update
116128
certificates for scanners, please see also section `Updating Scanner
117129
Certificates`.
118130

119-
120131
## Configure PostgreSQL Database Backend
121132

122133
### Setting up the PostgreSQL database
@@ -220,7 +231,6 @@ SELECT nspname || '.' || relname AS "relation",
220231

221232
These queries were taken from https://wiki.postgresql.org/wiki/Disk_Usage
222233

223-
224234
## Migrating the Database (e.g. during an upgrade of GVM)
225235

226236
If you have used Manager before (e.g. an older version which got upgraded to
@@ -234,7 +244,6 @@ Use this command to run the migration:
234244

235245
gvmd --migrate
236246

237-
238247
## Creating an administrator user for GVM
239248

240249
You can create an administrator user with the `--create-user` option of `gvmd`:
@@ -248,7 +257,6 @@ clients like the Greenbone Security Assistant (GSA).
248257
249258
Also, the new user can change their password via GSA.
250259
251-
252260
## Set the Feed Import Owner
253261
254262
Certain resources that were previously part of the gvmd source code are now
@@ -262,7 +270,6 @@ The UUIDs of all created users can be found using
262270
263271
gvmd --get-users --verbose
264272
265-
266273
## Keeping the feeds up-to-date
267274
268275
The `gvmd Data`, `SCAP` and `CERT` Feeds should be kept up-to-date by calling the
@@ -300,9 +307,9 @@ Please note: The `CERT` feed sync depends on data provided by the `SCAP` feed
300307
and should be called after syncing the latter.
301308
You will need the `rsync` tool for a successful synchronization.
302309
303-
## Configure the default OSPD scanner socket path
310+
## Configure the default ospd scanner socket path
304311
305-
By default, Manager tries to connect to the default OSPD scanner via the following path:
312+
By default, Manager tries to connect to the default ospd scanner via the following path:
306313
307314
/var/run/ospd/ospd.sock
308315
@@ -316,7 +323,6 @@ Update the path (example, path needs to be adapted accordingly):
316323

317324
gvmd --modify-scanner=<uuid of OpenVAS Default scanner> --scanner-host=<install-prefix>/var/run/ospd/ospd-openvas.sock
318325

319-
320326
## Logging Configuration
321327

322328
By default, Manager writes logs to the file
@@ -360,7 +366,6 @@ Logging to `syslog` can be enabled in each domain like:
360366
syslog_facility=daemon
361367
level=128
362368

363-
364369
## Optimizing the database
365370

366371
Greenbone Vulnerability Manager offers the command line option
@@ -460,7 +465,6 @@ supported values for `<name>` are:
460465
This creates the cache containing the unfiltered result counts of all reports
461466
that are not cached yet.
462467

463-
464468
## Encrypted Credentials
465469

466470
By default, the Manager stores private key and password parts of target
@@ -521,7 +525,6 @@ No encryption: If for backward compatibility reasons encrypted credentials
521525
are not desired, the manager must _always_ be started with the option
522526
`--disable-encrypted-credentials`.
523527
524-
525528
## Resetting Credentials Encryption Key
526529
527530
If you lost some part of the encryption key, neither a regular migration nor
@@ -549,7 +552,6 @@ Create a new key:
549552
550553
Finally, reset all credentials, by hand.
551554
552-
553555
## Updating Scanner Certificates
554556
555557
If you have changed the CA certificate used to sign the server and client
@@ -598,7 +600,6 @@ Replace the path to the pem-file with the one of your setup. The
598600
UUID is the fixed one of the immutable global setting for the default
599601
CA certificate and thus does not need to be changed.
600602
601-
602603
## Changing the Maximum Number of Rows per Page
603604
604605
The maximum number of rows returned by the GMP `GET` commands, like `GET_TARGETS`,
@@ -618,12 +619,12 @@ This changes the global value of the setting, and so applies to all users.
618619
Adding `--user` to the command will set a value for maximum rows only for that
619620
user.
620621

621-
622622
## Prerequisites for Optional Features
623623

624624
Certain features of the Manager also require some programs at run time:
625625

626626
Prerequisites for generating PDF reports:
627+
627628
* pdflatex
628629

629630
On Debian GNU/Linux 'Stretch' 9 the following packages can be installed to
@@ -633,23 +634,29 @@ Prerequisites for generating PDF reports:
633634
apt-get install texlive-fonts-recommended
634635

635636
Prerequisites for generating HTML reports:
637+
636638
* xsltproc
637639

638640
Prerequisites for generating verinice reports:
641+
639642
* xsltproc, xmlstarlet, zip
640643

641644
Prerequisites for generating credential RPM packages:
645+
642646
* rpm
643647
* fakeroot
644648

645649
Prerequisites for generating credential DEB packages:
650+
646651
* dpkg
647652
* fakeroot
648653

649654
Prerequisites for generating credentials .exe packages:
655+
650656
* makensis (usually distributed as part of nsis)
651657

652658
Prerequisites for generating system reports:
659+
653660
* A program in the `PATH`, with usage `gvmcg seconds type`, where
654661
seconds is the number of seconds before now that the report covers,
655662
and type is the type of report. When called with type `titles` the
@@ -662,48 +669,61 @@ Prerequisites for generating system reports:
662669
indicate failure by simply refraining from printing.
663670

664671
Prerequisites for signature verification:
672+
665673
* gnupg
666674

667675
Prerequisites for HTTP alerts:
676+
668677
* wget
669678

670679
Prerequisites for Alemba vFire alert:
680+
671681
* A program in the `PATH` called `greenbone_vfire_connector` that takes the
672682
path to an XML file as described by doc/vfire-data-xml.rnc as an argument.
673683

674684
Prerequisites for Sourcefire Connector alert:
685+
675686
* A program in the `PATH` called `greenbone_sourcefire_connector` that takes
676687
args IP, port, PKCS12 file and report file in Sourcefire format.
677688

678689
Prerequisites for verinice .PRO Connector alert:
690+
679691
* A program in the `PATH` called `greenbone_verinice_connector` that takes args
680692
IP, port, username, password and report file in verinice .PRO format.
681693

682694
Prerequisites for SCP alert:
695+
683696
* sshpass
684697
* scp
685698

686699
Prerequisites for Send alert:
700+
687701
* socat
688702

689703
Prerequisites for SNMP alert:
704+
690705
* snmp
691706

692707
Prerequisites for SMB alert:
708+
693709
* python3
694710
* smbclient
695711

696712
Prerequisites for Tipping Point alert:
713+
697714
* python3
698715
* python3-lxml
699716

700717
Prerequisites for key generation on systems with low entropy:
718+
701719
* haveged (or a similar tool)
702720

703721
Prerequisites for S/MIME support (e.g. email encryption):
722+
704723
* GNU privacy guard - S/MIME version (Debian package: gpgsm)
705724

706725
Prerequisites for certificate generation:
726+
707727
* GnuTLS certtool (Debian package: gnutls-bin)
708728

709729
## Static code analysis with the Clang Static Analyzer

0 commit comments

Comments
 (0)