[Openvas-distro] Testing OpenVAS OBS packages

[Matthew Mundell]

> > 2) Create client certificates and the om user for the manager so it can
> > talk to the scanner.
>
> openvas-mkcert-client is in -scanner so -manager can't rely on it being
> installed.

Surely the Manager package depends on the Scanner package, so
openvas-mkcert-client will be installed.

> > 3) Start the scanner so it builds the initial cache.
>
> It should do that automatically when it needs to do that upon start.

Michael is saying that the Manager install should ensure that the Scanner
is running before starting the Manager.  This is something that the package
should take care of, it's definitely out of the scope of the Manager.

> > 4) Start openvas-manager with --rebuild to initialize the manager DB.
>
> It should do that automatically when it needs to do that upon start.

This could be a good idea.  Maybe some sort of --auto-rebuild option.
However, the Manager would need some way of knowing when it needs to.  To
do this properly would require a change to OTP, so it's far off.

> I know of no package that would do that. While it is understandable that it
> should be as easy as possible OpenVAS isn't for "Joe Sixpack" but a tool for
> security professionals and those should be able to read a manual. I never read
> that compendium (so I don't know if it already has such a page) but those
> steps could get summarized on some quickstart page on openvas.org.

There is http://www.openvas.org/setup-and-start.html but OpenVAS should be
easy to install for everyone.  If new users can install easily they can
help us with tasks like docs, client programming and basic support.

--
Greenbone Networks GmbH
Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460
Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner