docker部署开源漏洞扫描系统openvas
·
docker部署开源漏洞扫描系统openvas
完整的docker-compose.yml文件,可通过docker-compose up -d直接构建容器,容器构建过程中,会同步漏洞数据库,根据网络情况有可能会很慢。
一、基本配置环境:
容器版本:
[root@controller openvas_data]# docker version
Client: Docker Engine - Community
Version: 26.1.3
API version: 1.45
Go version: go1.21.10
Git commit: b72abbb
Built: Thu May 16 08:34:00 2024
OS/Arch: linux/arm64
Context: default
Server: Docker Engine - Community
Engine:
Version: 26.1.3
API version: 1.45 (minimum version 1.24)
Go version: go1.21.10
Git commit: 8e96db1
Built: Thu May 16 08:33:12 2024
OS/Arch: linux/arm64
Experimental: false
containerd:
Version: 1.6.32
GitCommit: 8b3b7ca2e5ce38e8f31a34f35b2b68ceb8470d89
runc:
Version: 1.1.12
GitCommit: v1.1.12-0-g51d5e94
docker-init:
Version: 0.19.0
GitCommit: de40ad0
架构:鲲鹏920(ARM64)
openvas镜像:immauss/openvas:
二,创建docker-compose.yml文件
参考镜像的开源项目,创建docker-compose的部署文件。
开源项目地址:https://github.com/immauss/openvas
docker-compose.yml参考释义如下:
services:
openvas:
ports:
- "8080:9392"
environment:
- "PASSWORD=admin"
- "USERNAME=admin"
- "RELAYHOST=172.17.0.1"
- "SMTPPORT=25"
- "REDISDBS=512" # number of Redis DBs to use
- "QUIET=false" # dump feed sync noise to /dev/null
- "NEWDB=false" # only use this for creating a blank DB
- "SKIPSYNC=true" # Skips the feed sync on startup.
- "RESTORE=false" # This probably not be used from compose... see docs.
- "DEBUG=false" # This will cause the container to stop and not actually start gvmd
- "HTTPS=false" # wether to use HTTPS or not
- "GMP=9390" # to enable see docs
volumes:
- "openvas:/data"
container_name: openvas
image: immauss/openvas:beta
volumes:
openvas:
三、创建好docker-compose文件后,在服务区直接运行docker-compose up -d创建容器
docker-compose up -d
魔乐社区(Modelers.cn) 是一个中立、公益的人工智能社区,提供人工智能工具、模型、数据的托管、展示与应用协同服务,为人工智能开发及爱好者搭建开放的学习交流平台。社区通过理事会方式运作,由全产业链共同建设、共同运营、共同享有,推动国产AI生态繁荣发展。
更多推荐


所有评论(0)