GVM升级后启动异常处理

在Kali Linux系统中,用户进行了系统升级后遇到GVM(OpenVAS)服务无法启动的问题。通过检查系统状态、PID文件、重新安装和配置文件修改,最终成功启动GVM服务并打开了WebUI。整个过程涉及系统服务管理、错误排查、GVM组件版本匹配及数据库迁移等步骤。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

目录

1.  Kali升级

2. 升级完成后,启动GVM(OpenVas)发现打不开:

3. 按照要求检测原因:

4. 查看PID文件

5. 重新检测安装

6. 执行兼容处理后,再次检测安装:

7. 查找安装路径,修改配置文件:

8. 重新安装:

9. 再次检测安装:

10. 启动成功:

11. 页面打开:


1.  Kali升级

apt-get update

apt-get dist-upgrade

2. 升级完成后,启动GVM(OpenVas)发现打不开:

oot@Fkali:~# gvm-start
[*] Please wait for the GVM / OpenVAS services to start.
[*]
[*] You might need to refresh your browser once it opens.
[*]
[*]  Web UI (Greenbone Security Assistant): https://127.0.0.1:9392

Job for gvmd.service failed because a timeout was exceeded.
See "systemctl status gvmd.service" and "journalctl -xe" for details.

3. 按照要求检测原因:

oot@Fkali:~# systemctl status gvmd.service
● gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)
     Loaded: loaded (/lib/systemd/system/gvmd.service; disabled; vendor preset: disabled)
     Active: activating (start) since Thu 2021-08-05 16:42:08 HKT; 31s ago
       Docs: man:gvmd(8)
    Process: 10055 ExecStart=/usr/sbin/gvmd --osp-vt-update=/run/ospd/ospd.sock (code=exited, status=0/SUCCESS)
      Tasks: 0 (limit: 12492)
     Memory: 4.0K
        CPU: 14ms
     CGroup: /system.slice/gvmd.service

Aug 05 16:42:08 Fkali systemd[1]: Starting Greenbone Vulnerability Manager daemon (gvmd)...
Aug 05 16:42:08 Fkali systemd[1]: gvmd.service: Can't open PID file /run/gvm/gvmd.pid (yet?) after start: Operation not permitted

4. 查看PID文件

查看PID文件,发现没有上面的路径:

root@Fkali:~# cd /run/gvm/
root@Fkali:/run/gvm# ls

5. 重新检测安装

oot@Fkali:/run/gvm# sudo gvm-check-setup
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
gvm-check-setup 21.4.1
  Test completeness and readiness of GVM-21.4.1
chdir: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Step 1: Checking OpenVAS (Scanner)... 
        OK: OpenVAS Scanner is present in version 21.4.1.
        OK: Server CA Certificate is present as /var/lib/gvm/CA/servercert.pem.
Checking permissions of /var/lib/openvas/gnupg/*
        OK: _gvm owns all files in /var/lib/openvas/gnupg
        OK: redis-server is present.
        OK: scanner (db_address setting) is configured properly using the redis-server socket: /var/run/redis-openvas/redis-server.sock
        OK: redis-server is running and listening on socket: /var/run/redis-openvas/redis-server.sock.                                                                                                            
        OK: redis-server configuration is OK and redis-server is running.                                                                                                                                         
        OK: _gvm owns all files in /var/lib/openvas/plugins                                                                                                                                                       
        OK: NVT collection in /var/lib/openvas/plugins contains 58045 NVTs.                                                                                                                                       
Checking that the obsolete redis database has been removed                                                                                                                                                        
        OK: No old Redis DB                                                                                                                                                                                       
        OK: ospd-OpenVAS is present in version 21.4.1.                                                                                                                                                            
Step 2: Checking GVMD Manager ...                                                                                                                                                                                 
        OK: GVM Manager (gvmd) is present in version 21.4.2.                                                                                                                                                      
Step 3: Checking Certificates ... 
        OK: GVM client certificate is valid and present as /var/lib/gvm/CA/clientcert.pem.
        OK: Your GVM certificate infrastructure passed validation.
Step 4: Checking data ... 
        OK: SCAP data found in /var/lib/gvm/scap-data.
        OK: CERT data found in /var/lib/gvm/cert-data.
Step 5: Checking Postgresql DB and user ... 
        OK: Postgresql version and default port are OK.
 gvmd      | _gvm     | UTF8     | en_HK.UTF-8 | en_HK.UTF-8 | 
Database is wrong version.
        ERROR: Database is wrong version. You have installed a new gvmd version
        FIX: Run 'sudo runuser -u _gvm -- gvmd --migrate'

 ERROR: Your GVM-21.4.1 installation is not yet complete!

Please follow the instructions marked with FIX above and run this
script again.

6. 执行兼容处理后,再次检测安装:

root@Fkali:/run/gvm# sudo gvm-check-setup
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
gvm-check-setup 21.4.1
  Test completeness and readiness of GVM-21.4.1
chdir: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Step 1: Checking OpenVAS (Scanner)... 
        OK: OpenVAS Scanner is present in version 21.4.1.
        OK: Server CA Certificate is present as /var/lib/gvm/CA/servercert.pem.
Checking permissions of /var/lib/openvas/gnupg/*
        OK: _gvm owns all files in /var/lib/openvas/gnupg
        OK: redis-server is present.
        OK: scanner (db_address setting) is configured properly using the redis-server socket: /var/run/redis-openvas/redis-server.sock
        OK: redis-server is running and listening on socket: /var/run/redis-openvas/redis-server.sock.
        OK: redis-server configuration is OK and redis-server is running.
        OK: _gvm owns all files in /var/lib/openvas/plugins
        OK: NVT collection in /var/lib/openvas/plugins contains 58045 NVTs.
Checking that the obsolete redis database has been removed
        OK: No old Redis DB
        OK: ospd-OpenVAS is present in version 21.4.1.
Step 2: Checking GVMD Manager ... 
        OK: GVM Manager (gvmd) is present in version 21.4.2.
Step 3: Checking Certificates ... 
        OK: GVM client certificate is valid and present as /var/lib/gvm/CA/clientcert.pem.
        OK: Your GVM certificate infrastructure passed validation.
Step 4: Checking data ... 
        OK: SCAP data found in /var/lib/gvm/scap-data.
        OK: CERT data found in /var/lib/gvm/cert-data.
Step 5: Checking Postgresql DB and user ... 
        OK: Postgresql version and default port are OK.
 gvmd      | _gvm     | UTF8     | en_HK.UTF-8 | en_HK.UTF-8 | 
        OK: At least one user exists.
Step 6: Checking Greenbone Security Assistant (GSA) ... 
Oops, secure memory pool already initialized
        ERROR: Greenbone Security Assistant too old or too new: 21.4.1~dev1
        FIX: Please install Greenbone Security Assistant >= 21.04.

 ERROR: Your GVM-21.4.1 installation is not yet complete!

Please follow the instructions marked with FIX above and run this
script again.
 

7. 查找安装路径,修改配置文件:

root@Fkali:/run/gvm# whereis gvm-check-setup

root@Fkali:/run/gvm# sed -i"" 's/GSA_MAJOR="21.04"/GSA_MAJOR="21.4"/g' $^Cusr/bin/gvm-check-setup

8. 重新安装:

root@Fkali:/run/gvm# gvm-setup
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Creating openvas-scanner's certificate files
sh: 0: getcwd() failed: No such file or directory

[>] Creating database
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
could not identify current directory: No such file or directory
createuser: error: creation of new role failed: ERROR:  role "_gvm" already exists
could not identify current directory: No such file or directory
createdb: error: database creation failed: ERROR:  database "gvmd" already exists
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
could not identify current directory: No such file or directory
could not identify current directory: No such file or directory
psql: fatal: could not find own program executable
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
could not identify current directory: No such file or directory
could not identify current directory: No such file or directory
psql: fatal: could not find own program executable
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
could not identify current directory: No such file or directory
could not identify current directory: No such file or directory
psql: fatal: could not find own program executable
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
could not identify current directory: No such file or directory
could not identify current directory: No such file or directory
psql: fatal: could not find own program executable
[>] Migrating database
[>] Checking for admin user
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
could not identify current directory: No such file or directory
could not identify current directory: No such file or directory
psql: fatal: could not find own program executable
[*] Define Feed Import Owner
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
[>] Updating OpenVAS feeds
[*] Updating: NVT
sh: 0: getcwd() failed: No such file or directory
sh: 0: getcwd() failed: No such file or directory
rsync: [Receiver] getcwd(): No such file or directory (2)
rsync error: errors selecting input/output files, dirs (code 3) at util.c(1088) [Receiver=3.2.3]
[>] Uploading plugins in Redis
[*] Updating: GVMD Data
sh: 0: getcwd() failed: No such file or directory
rsync: [Receiver] getcwd(): No such file or directory (2)
rsync error: errors selecting input/output files, dirs (code 3) at util.c(1088) [Receiver=3.2.3]
[*] Updating: Scap Data
sh: 0: getcwd() failed: No such file or directory
rsync: [Receiver] getcwd(): No such file or directory (2)
rsync error: errors selecting input/output files, dirs (code 3) at util.c(1088) [Receiver=3.2.3]
[*] Updating: Cert Data
sh: 0: getcwd() failed: No such file or directory
rsync: [Receiver] getcwd(): No such file or directory (2)
rsync error: errors selecting input/output files, dirs (code 3) at util.c(1088) [Receiver=3.2.3]
[*] Checking Default scanner
08b69003-5fc2-4037-a479-93b440211c73  OpenVAS  /var/run/ospd/ospd.sock  0  OpenVAS Default

[+] Done
 

9. 再次检测安装:

root@Fkali:/run/gvm# sudo gvm-check-setup
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
gvm-check-setup 21.4.1
  Test completeness and readiness of GVM-21.4.1
chdir: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Step 1: Checking OpenVAS (Scanner)... 
        OK: OpenVAS Scanner is present in version 21.4.1.
        OK: Server CA Certificate is present as /var/lib/gvm/CA/servercert.pem.
Checking permissions of /var/lib/openvas/gnupg/*
        OK: _gvm owns all files in /var/lib/openvas/gnupg
        OK: redis-server is present.
        OK: scanner (db_address setting) is configured properly using the redis-server socket: /var/run/redis-openvas/redis-server.sock
        OK: redis-server is running and listening on socket: /var/run/redis-openvas/redis-server.sock.
        OK: redis-server configuration is OK and redis-server is running.
        OK: _gvm owns all files in /var/lib/openvas/plugins
        OK: NVT collection in /var/lib/openvas/plugins contains 58045 NVTs.
Checking that the obsolete redis database has been removed
        OK: No old Redis DB
        OK: ospd-OpenVAS is present in version 21.4.1.
Step 2: Checking GVMD Manager ... 
        OK: GVM Manager (gvmd) is present in version 21.4.2.
Step 3: Checking Certificates ... 
        OK: GVM client certificate is valid and present as /var/lib/gvm/CA/clientcert.pem.
        OK: Your GVM certificate infrastructure passed validation.
Step 4: Checking data ... 
        OK: SCAP data found in /var/lib/gvm/scap-data.
        OK: CERT data found in /var/lib/gvm/cert-data.
Step 5: Checking Postgresql DB and user ... 
        OK: Postgresql version and default port are OK.
 gvmd      | _gvm     | UTF8     | en_HK.UTF-8 | en_HK.UTF-8 | 
        OK: At least one user exists.
Step 6: Checking Greenbone Security Assistant (GSA) ... 
Oops, secure memory pool already initialized
        OK: Greenbone Security Assistant is present in version 21.4.1~dev1.
Step 7: Checking if GVM services are up and running ... 
        OK: ospd-openvas service is active.
        Starting gvmd service
        Waiting for gvmd service
        OK: gvmd service is active.
        Starting greenbone-security-assistant service
        Waiting for greenbone-security-assistant service
        OK: greenbone-security-assistant service is active.
Step 8: Checking few other requirements...
        OK: nmap is present in version 21.4.1~dev1.
        OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work.
        WARNING: Could not find makensis binary, LSC credential package generation for Microsoft Windows targets will not work.
        SUGGEST: Install nsis.
        OK: xsltproc found.
        WARNING: Your password policy is empty.
        SUGGEST: Edit the /etc/gvm/pwpolicy.conf file to set a password policy.

It seems like your GVM-21.4.1 installation is OK.
 

10. 启动成功:

root@Fkali:/run/gvm# gvm-start
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
[*] Please wait for the GVM / OpenVAS services to start.
[*]
[*] You might need to refresh your browser once it opens.
[*]
[*]  Web UI (Greenbone Security Assistant): https://127.0.0.1:9392

● greenbone-security-assistant.service - Greenbone Security Assistant (gsad)
     Loaded: loaded (/lib/systemd/system/greenbone-security-assistant.service; disabled; vendor preset: disabled)
     Active: active (running) since Thu 2021-08-05 17:30:51 HKT; 7ms ago
       Docs: man:gsad(8)
             https://www.greenbone.net
    Process: 12680 ExecStart=/usr/sbin/gsad --listen=127.0.0.1 --port=9392 (code=exited, status=0/SUCCESS)
   Main PID: 12681 (gsad)
      Tasks: 3 (limit: 12492)
     Memory: 2.1M
        CPU: 10ms
     CGroup: /system.slice/greenbone-security-assistant.service
             ├─12681 /usr/sbin/gsad --listen=127.0.0.1 --port=9392
             └─12682 /usr/sbin/gsad --listen=127.0.0.1 --port=9392

Aug 05 17:30:51 Fkali systemd[1]: Starting Greenbone Security Assistant (gsad)...
Aug 05 17:30:51 Fkali gsad[12680]: Oops, secure memory pool already initialized
Aug 05 17:30:51 Fkali systemd[1]: Started Greenbone Security Assistant (gsad).

● gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)
     Loaded: loaded (/lib/systemd/system/gvmd.service; disabled; vendor preset: disabled)
     Active: active (running) since Thu 2021-08-05 17:30:46 HKT; 5s ago
       Docs: man:gvmd(8)
    Process: 12653 ExecStart=/usr/sbin/gvmd --osp-vt-update=/run/ospd/ospd.sock (code=exited, status=0/SUCCESS)
   Main PID: 12655 (gvmd)
      Tasks: 1 (limit: 12492)
     Memory: 73.2M
        CPU: 296ms
     CGroup: /system.slice/gvmd.service
             └─12655 gvmd: Waiting for incoming connections

Aug 05 17:30:45 Fkali systemd[1]: Starting Greenbone Vulnerability Manager daemon (gvmd)...
Aug 05 17:30:45 Fkali systemd[1]: gvmd.service: Can't open PID file /run/gvm/gvmd.pid (yet?) after start: Operation not permitted
Aug 05 17:30:46 Fkali systemd[1]: Started Greenbone Vulnerability Manager daemon (gvmd).

● ospd-openvas.service - OpenVAS Wrapper of the Greenbone Vulnerability Management (ospd-openvas)
     Loaded: loaded (/lib/systemd/system/ospd-openvas.service; disabled; vendor preset: disabled)
     Active: active (running) since Thu 2021-08-05 17:30:45 HKT; 5s ago
       Docs: man:ospd-openvas(8)
             man:openvas(8)
    Process: 12645 ExecStart=/usr/bin/ospd-openvas --unix-socket /run/ospd/ospd.sock --pid-file /run/ospd/ospd-openvas.pid --log-file /var/log/gvm/ospd-openvas.log --lock-file-dir /var/lib/openvas (code=exited, status=0/SUCCESS)
   Main PID: 12647 (ospd-openvas)
      Tasks: 4 (limit: 12492)
     Memory: 20.2M
        CPU: 194ms
     CGroup: /system.slice/ospd-openvas.service
             ├─12647 /usr/bin/python3 /usr/bin/ospd-openvas --unix-socket /run/ospd/ospd.sock --pid-file /run/ospd/ospd-openvas.pid --log-file /var/log/gvm/ospd-openvas.log --lock-file-dir /var/lib/openvas
             └─12649 /usr/bin/python3 /usr/bin/ospd-openvas --unix-socket /run/ospd/ospd.sock --pid-file /run/ospd/ospd-openvas.pid --log-file /var/log/gvm/ospd-openvas.log --lock-file-dir /var/lib/openvas

Aug 05 17:30:45 Fkali systemd[1]: Starting OpenVAS Wrapper of the Greenbone Vulnerability Management (ospd-openvas)...
Aug 05 17:30:45 Fkali systemd[1]: Started OpenVAS Wrapper of the Greenbone Vulnerability Management (ospd-openvas).

[*] Opening Web UI (https://127.0.0.1:9392) in: 5... 4... 3... 2... 1... 
 

root@Fkali:~/Desktop# ospd-openvas

11. 页面打开:

### Kali虚拟机中无法通过浏览器访问`http://localhost`的原因分析 在Kali Linux虚拟机环境中,当尝试通过浏览器访问`http://localhost`时出现问题,可能涉及多个方面的原因。以下是可能导致此问题的因素以及解决方案: #### 1. Apache服务未启动 Kali默认情况下并未预装Apache Web服务器。即使已安装,也可能因为服务未运行而导致无法访问。 ```bash # 检查Apache状态 systemctl status apache2 ``` 如果显示服务未运行,则可以通过以下命令启动并设置开机自启: ```bash sudo systemctl start apache2 sudo systemctl enable apache2 ``` 此外,还需确认Apache是否正常工作: ```bash curl http://localhost ``` 若返回HTML内容则表示Apache正在运行[^1]。 #### 2. 防火墙阻止本地连接 尽管引用提到的是关于Ping操作受阻的情况,但防火墙同样可以影响到HTTP请求。检查iptables规则是否存在限制: ```bash sudo iptables -L -n --line-numbers | grep DROP ``` 若有匹配项,可临时清空规则测试效果: ```bash sudo iptables -F ``` 对于更持久化的调整,考虑使用ufw工具管理入站流量允许列表[^2]: ```bash sudo ufw allow 'Apache Full' sudo ufw reload ``` #### 3. PHP配置错误引发页面加载失败 假设目标站点依赖PHP脚本执行(如DVWA),而PHP模块未能正确加载至Web服务器上也会造成空白页现象。验证php版本及其关联库的状态: ```bash php -v dpkg -l | grep php ``` 必要时重新安装必要的组件包: ```bash apt update && apt upgrade -y apt install libapache2-mod-php php-mysql php-curl php-gd php-json php-xml -y a2enmod rewrite headers proxy_fcgi setenvif service apache2 restart ``` 另外注意某些框架初始化阶段需手动迁移样例文档根目录下的`.dist`结尾文件名以便生效。 #### 4. 数据库引擎兼容性冲突 从另一条记录得知当前环境正准备部署GVM套件期间经历PostgreSQL集群升级过程。这一步骤间接说明数据库实例切换过程中存在潜在风险干扰其他应用层功能表现。因此建议先暂停相关变动直至基础网络服务能力恢复稳定后再继续推进高级特性集成计划[^3]: ```bash pg_lsclusters # 查看现有Cluster详情 ps aux|grep postgres # 审核进程存活状况 netstat -tulnp | grep :5432 # 探测监听端口开放情况 ``` 最后再依据实际需求决定是否重启整个DBMS或者单独某个instance来解除锁定态。 --- ### 总结 综合上述各点讨论可知,针对Kali虚拟机内无法经由标准方式浏览自身host资源这一难题可以从以下几个角度切入排查处理:一是确保核心web server处于活动当中;二是排除安全策略层面误拦截因素作用;三是修复因缺少关键插件所引起的渲染异常;四是规避后台数据存储单元重构动作带来的连锁反应。 ---
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值