Greenbone Logo

greenbone-feed-sync

Tool for downloading the Greenbone Community Feed.

greenbone-feed-sync assumes you are using the latest feed release and up to date components of the Greenbone Community Edition by default. It is highly configurable and can be adjusted easily for downloading different feed releases and types.

Installation
Usage
Usage on Kali Linux
Command Completion
Settings
Config
Development
Maintainer
Contributing
License

Installation

Version

greenbone-feed-sync uses semantic versioning.

Versions prior to 25.0.0 used calendar versioning.

Requirements

Python 3.10 and later is supported.

greenbone-feed-sync requires the rsync tool being installed and available within the PATH.

On Debian based Distributions like Ubuntu and Kali rsync can be installed via

sudo apt install rsync

Install using pipx

You can install the latest release of greenbone-feed-sync from the Python Package Index (pypi) using pipx

python3 -m pipx install greenbone-feed-sync

On Debian based Distributions like Ubuntu and Kali pipx itself can be installed via

sudo apt install pipx

Install using pip

NOTE: The pip install command does no longer work out-of-the-box in newer distributions like Ubuntu 23.04 or Debian 12 because of PEP 668. Please use the installation via pipx instead.

You can install the latest release of greenbone-feed-sync from the Python Package Index (pypi) using pip

python3 -m pip install greenbone-feed-sync

Usage

Most of the time you should just run the script without any arguments to download the new data for all necessary feed types

NOTE: See details about usage on Kali Linux

sudo greenbone-feed-sync

To get verbose progress output during the data download you might increase the verbosity

 sudo greenbone-feed-sync -vvv

If the script is run in a cron job the output can be turned off via

sudo greenbone-feed-sync --quiet

To download only a specific feed content the --type argument can be used

sudo greenbone-feed-sync --type nvt

Run --help to get information about all possible types and additional argument options

greenbone-feed-sync --help

Usage on Kali Linux

When running greenbone-feed-sync as root user, for example via sudo, the actual user and group of the process are changed to the gvm user and group via seteuid. This is done to ensure that gvmd and openvas-scanner can read the downloaded file contents.

When using the Greenbone Community Edition installed via packages on Kali Linux a different user and group are used. They are both named _gvm instead. Therefore the group and user settings need to be adjusted. This can be done by using a config file.

sudo mkdir /etc/gvm
sudo chmod +r /etc/gvm
cat <<EOF | sudo tee /etc/gvm/greenbone-feed-sync.toml
[greenbone-feed-sync]
user="_gvm"
group="_gvm"
EOF
sudo chmod +r /etc/gvm/greenbone-feed-sync.toml

Command Completion

greenbone-feed-sync comes with support for command line completion in bash and zsh.

Setup for bash:

echo "source ~/.greenbone-feed-sync-complete.bash" >> ~/.bashrc
greenbone-feed-sync --print-completion bash > ~/.greenbone-feed-sync-complete.bash

Alternatively, you can use the result of the completion command directly with the eval function of your bash shell:

eval "$(greenbone-feed-sync --print-completion bash)"

Setup for zsh:

echo 'fpath=("$HOME/.zsh.d" $fpath)' >> ~/.zsh
mkdir -p ~/.zsh.d/
greenbone-feed-sync --print-completion zsh > ~/.zsh.d/_greenbone_feed_sync

Settings

The greenbone-feed-sync script is adjustable for all kind of purposes and very flexible which content gets downloaded. Most likely you will never need to adjust the settings because the defaults will suffice. Changing the settings is only required for experts and testing purposes.

verbose

Name	Value
CLI Argument	`--verbose, -v`
Config Variable	verbose
Environment Variable	`GREENBONE_FEED_SYNC_VERBOSE`
Default Value	2
Description	Log verbosity. `-vvv` for maximum verbosity.

quiet

Name	Value
CLI Argument	`--quiet`
Config Variable
Environment Variable
Default Value
Description	Disable all log output. Same as setting `verbose` or `GREENBONE_FEED_SYNC_VERBOSE` to 0

config

Name	Value
CLI Argument	`--config, -c`
Config Variable
Environment Variable
Default Value	`~/.config/greenbone-feed-sync.toml` and `/etc/gvm/greenbone-feed-sync.toml`
Description	TOML config file to load settings from.

private-directory

Name	Value
CLI Argument	`--private-directory`
Config Variable	private-directory
Environment Variable	`GREENBONE_FEED_SYNC_PRIVATE_DIRECTORY`
Default Value
Description	(Sub-)Directory to exclude from the sync which will never get deleted automatically.

compression-level

Name	Value
CLI Argument	`--compression-level`
Config Variable	compression-level
Environment Variable	`GREENBONE_FEED_SYNC_COMPRESSION_LEVEL`
Default Value	9
Description	rsync compression level 0-9. (0 - no compression, 9 - high compression)

type

Name	Value
CLI Argument	`--type`
Config Variable
Environment Variable
Default Value	all
Description	Specifies which feed data should be downloaded. Possible values are `all`, `all-enterprise`, `nvt`/`nvts`, `gvmd-data`, `scap`, `cert`, `notus`, `nasl`, `skiron`, `agent`, `report-format`/`report-formats`, `scan-config`/`scan-configs`, `port-list`/`port-lists` or `vt-tech-info`.

feed-url

Name	Value
CLI Argument
Config Variable	feed-url
Environment Variable	`GREENBONE_FEED_SYNC_URL`
Default Value	`rsync://feed.community.greenbone.net/community`
Description	URL to download the feed data from. Other URLs will be relative to this URL by default. For example using `rsync://example.com` as feed url the notus url will be `rsync://example.com/vulnerability-feed/$FEED_VERSION/vt-data/notus/`.

feed-release

Name
CLI Argument	`--feed-release`
Config Variable	feed-release
Environment Variable	`GREENBONE_FEED_SYNC_FEED_RELEASE`
Default Value	`25.0`
Description	Release series of the feed to be downloaded. Download destinations and URLs will use this variable.

destination-prefix

Name	Value
CLI Argument	`--destination-prefix`
Config Variable	destination-prefix
Environment Variable	`GREENBONE_FEED_SYNC_DESTINATION_PREFIX`
Default Value	`/var/lib/`
Description	Directory prefix to use for default feed data download destinations. Other download destinations will be relative to this path by default. For example using `/opt/lib` as destination prefix will change the default of the notus destination to `/opt/lib/notus`.

gvmd-data-destination

Name	Value
CLI Argument	`--gvmd-data-destination`
Config Variable	gvmd-data-destination
Environment Variable	`GREENBONE_FEED_SYNC_GVMD_DATA_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/data-objects/gvmd/$FEED_VERSION/`
Description	Destination of the downloaded gvmd data.

gvmd-data-url

Name	Value
CLI Argument	`--gvmd-data-url`
Config Variable	gvmd-data-url
Environment Variable	`GREENBONE_FEED_SYNC_GVMD_DATA_URL`
Default Value	`$FEED_URL/data-feed/$FEED_VERSION/`
Description	URL to download the gvmd data from. This includes scan-configs, report-formats and port-lists.

notus-destination

Name	Value
CLI Argument	`--notus-destination`
Config Variable	notus-destination
Environment Variable	`GREENBONE_FEED_SYNC_NOTUS_DESTINATION`
Default Value	`$DESTINATION_PREFIX/notus`
Description	Destination of the downloaded notus data.

notus-url

Name	Value
CLI Argument	`--notus-url`
Config Variable	notus-url
Environment Variable	`GREENBONE_FEED_SYNC_NOTUS_URL`
Default Value	`$FEED_URL/vulnerability-feed/$FEED_VERSION/vt-data/notus/`
Description	URL to download the notus data from.

nasl-destination

Name	Value
CLI Argument	`--nasl-destination`
Config Variable	nasl-destination
Environment Variable	`GREENBONE_FEED_SYNC_NASL_DESTINATION`
Default Value	`$DESTINATION_PREFIX/openvas/plugins`
Description	Destination of the downloaded nasl data.

nasl-url

Name	Value
CLI Argument	`--nasl-url`
Config Variable	nasl-url
Environment Variable	`GREENBONE_FEED_SYNC_NASL_URL`
Default Value	`$FEED_URL/vulnerability-feed/$FEED_VERSION/vt-data/nasl/`
Description	URL to download the nasl data from.

skiron-destination

Name	Value
CLI Argument	`--skiron-destination`
Config Variable	skiron-destination
Environment Variable	`GREENBONE_FEED_SYNC_SKIRON_DESTINATION`
Default Value	`$DESTINATION_PREFIX/skiron`
Description	Destination of the downloaded Skiron data.

skiron-url

Name	Value
CLI Argument	`--skiron-url`
Config Variable	skiron-url
Environment Variable	`GREENBONE_FEED_SYNC_SKIRON_URL`
Default Value	`$FEED_URL/vulnerability-feed/$FEED_RELEASE/skiron/`
Description	URL to download the Skiron data from.

Download this feed with greenbone-feed-sync --type skiron.

vt-tech-info-destination

Name	Value
CLI Argument	`--vt-tech-info-destination`
Config Variable	vt-tech-info-destination
Environment Variable	`GREENBONE_FEED_SYNC_VT_TECH_INFO_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/vt-tech-info`
Description	Destination of the downloaded VT technical information.

vt-tech-info-url

Name	Value
CLI Argument	`--vt-tech-info-url`
Config Variable	vt-tech-info-url
Environment Variable	`GREENBONE_FEED_SYNC_VT_TECH_INFO_URL`
Default Value	`$FEED_URL/vulnerability-feed/$FEED_VERSION/vt-tech-info/`
Description	URL to download the VT technical information from.

scap-data-destination

Name	Value
CLI Argument	`--scap-data-destination`
Config Variable	scap-data-destination
Environment Variable	`GREENBONE_FEED_SYNC_SCAP_DATA_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/scap-data`
Description	Destination of the downloaded SCAP data.

scap-data-url

Name	Value
CLI Argument	`--scap-data-url`
Config Variable	scap-data-url
Environment Variable	`GREENBONE_FEED_SYNC_SCAP_DATA_URL`
Default Value	`$FEED_URL/vulnerability-feed/$FEED_VERSION/scap-data`
Description	URL to download the SCAP data from.

cert-data-destination

Name	Value
CLI Argument	`--cert-data-destination`
Config Variable	cert-data-destination
Environment Variable	`GREENBONE_FEED_SYNC_CERT_DATA_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/cert-data`
Description	Destination of the downloaded CERT data.

cert-data-url

Name	Value
CLI Argument	`--cert-data-url`
Config Variable	cert-data-url
Environment Variable	`GREENBONE_FEED_SYNC_CERT_DATA_URL`
Default Value	`$FEED_URL/vulnerability-feed/$FEED_VERSION/cert-data`
Description	URL to download the CERT data from.

agent-app-destination

Name	Value
CLI Argument	`--agent-app-destination`
Config Variable	agent-app-destination
Environment Variable	`GREENBONE_FEED_SYNC_AGENT_APP_DESTINATION`
Default Value	`$GVMD_DATA_DESTINATION/agent-app`
Description	Destination of the downloaded agent app data.

agent-app-url

Name	Value
CLI Argument	`--agent-app-url`
Config Variable	agent-app-url
Environment Variable	`GREENBONE_FEED_SYNC_AGENT_APP_URL`
Default Value	`$FEED_URL/data-feed/$FEED_RELEASE/scan-agent-app/`
Description	URL to download the agent app data from.

agent-updater-destination

Name	Value
CLI Argument	`--agent-updater-destination`
Config Variable	agent-updater-destination
Environment Variable	`GREENBONE_FEED_SYNC_AGENT_UPDATER_DESTINATION`
Default Value	`$GVMD_DATA_DESTINATION/agent-updater`
Description	Destination of the downloaded agent updater data.

agent-updater-url

Name	Value
CLI Argument	`--agent-updater-url`
Config Variable	agent-updater-url
Environment Variable	`GREENBONE_FEED_SYNC_AGENT_UPDATER_URL`
Default Value	`$FEED_URL/data-feed/$FEED_RELEASE/scan-agent-updater/`
Description	URL to download the agent updater data from.

agent-installer-destination

Name	Value
CLI Argument	`--agent-installer-destination`
Config Variable	agent-installer-destination
Environment Variable	`GREENBONE_FEED_SYNC_AGENT_INSTALLER_DESTINATION`
Default Value	`$GVMD_DATA_DESTINATION/agent-installer`
Description	Destination of the downloaded agent installer data.

agent-installer-url

Name	Value
CLI Argument	`--agent-installer-url`
Config Variable	agent-installer-url
Environment Variable	`GREENBONE_FEED_SYNC_AGENT_INSTALLER_URL`
Default Value	`$FEED_URL/data-feed/$FEED_RELEASE/agent-installers/`
Description	URL to download the agent installer data from.

report-formats-destination

Name	Value
CLI Argument	`--report-formats-destination`
Config Variable	report-formats-destination
Environment Variable	`GREENBONE_FEED_SYNC_REPORT_FORMATS_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/data-objects/gvmd/$FEED_VERSION/report-formats`
Description	Destination of the downloaded report format data.

report-formats-url

Name	Value
CLI Argument	`--report-formats-url`
Config Variable	report-formats-url
Environment Variable	`GREENBONE_FEED_SYNC_REPORT_FORMATS_URL`
Default Value	`$FEED_URL/data-feed/$FEED_VERSION/report-formats`
Description	URL to download the report format data from.

scan-configs-destination

Name	Value
CLI Argument	`--scan-configs-destination`
Config Variable	scan-configs-destination
Environment Variable	`GREENBONE_FEED_SYNC_SCAN_CONFIGS_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/data-objects/gvmd/$FEED_VERSION/scan-configs`
Description	Destination of the downloaded scan config data.

scan-configs-url

Name	Value
CLI Argument	`--scan-configs-url`
Config Variable	scan-configs-url
Environment Variable	`GREENBONE_FEED_SYNC_SCAN_CONFIGS_URL`
Default Value	`$FEED_URL/data-feed/$FEED_VERSION/scan-configs`
Description	URL to download the scan config data from.

port-lists-destination

Name	Value
CLI Argument	`--port-lists-destination`
Config Variable	port-lists-destination
Environment Variable	`GREENBONE_FEED_SYNC_PORT_LISTS_DESTINATION`
Default Value	`$DESTINATION_PREFIX/gvm/data-objects/gvmd/$FEED_VERSION/port-lists`
Description	Destination of the downloaded port list data.

port-lists-url

Name	Value
CLI Argument	`--port-lists-url`
Config Variable	port-lists-url
Environment Variable	`GREENBONE_FEED_SYNC_PORT_LISTS_URL`
Default Value	`$FEED_URL/data-feed/$FEED_VERSION/port-lists`
Description	URL to download the port list data from.

gvmd-lock-file

Name	Value
CLI Argument	`--gvmd-lock-file`
Config Variable	gvmd-lock-file
Environment Variable	`GREENBONE_FEED_SYNC_GVMD_LOCK_FILE`
Default Value	`$DESTINATION_PREFIX/gvm/feed-update.lock`
Description	File to use for locking the feed synchronization for data loaded by the gvmd daemon. Used to avoid that more then one process accesses the feed data at the same time.

openvas-lock-file

Name	Value
CLI Argument	`--openvas-lock-file`
Config Variable	openvas-lock-file
Environment Variable	`GREENBONE_FEED_SYNC_OPENVAS_LOCK_FILE`
Default Value	`$DESTINATION_PREFIX/openvas/feed-update.lock`
Description	File to use for locking the feed synchronization for data loaded by the openvas scanner. Used to avoid that more then one process accesses the feed data at the same time.

fail-fast

Name	Value
CLI Argument	`--fail-fast, --failfast`
Config Variable	fail-fast
Environment Variable	`GREENBONE_FEED_SYNC_FAIL_FAST`
Default Value	false
Description	Stop after a first error has occurred. Otherwise the script tries to download additional data if specified.

no-wait

Name	Value
CLI Argument	`--no-wait`
Config Variable	no-wait
Environment Variable	`GREENBONE_FEED_SYNC_NO_WAIT`
Default Value	false
Description	Fail directly if the lock file can't be acquired.

wait-interval

Name	Value
CLI Argument	`--wait-interval`
Config Variable	wait-interval
Environment Variable	`GREENBONE_FEED_SYNC_LOCK_WAIT_INTERVAL`
Default Value	5
Description	Time to wait in seconds after failed lock attempt before re-trying to lock the file.

rsync-timeout

Name	Value
CLI Argument	`--rsync-timeout`
Config Variable	rsync-timeout
Environment Variable	`GREENBONE_FEED_SYNC_RSYNC_TIMEOUT`
Default Value
Description	Maximum I/O timeout in seconds used for rsync. If no data is transferred for the specified time then rsync will exit. By default no timeout is set and the rsync default will be used.

no-permission-change

Name	Value
CLI Argument	`--no-permission-change`
Config Variable	no-permission-change
Environment Variable	`GREENBONE_FEED_SYNC_NO_PERMISSION_CHANGE`
Default Value	false
Description	Do not preserve permissions and skip normalizing the feed tree via rsync's `--perms` and `--chmod` options. By default permissions are preserved. Enable this to pass `--no-perms` to rsync, for storage that allows writing files but rejects changing their modes, for example some bind mounts, network filesystems or container volumes where rsync would otherwise fail with a permission error.

group

Name	Value
CLI Argument	`--group`
Config Variable	group
Environment Variable	`GREENBONE_FEED_SYNC_GROUP`
Default Value	gvm
Description	If the greenbone-feed-sync script is run as root, the effective group is changed to this group name or ID.

user

Name	Value
CLI Argument	`--user`
Config Variable	user
Environment Variable	`GREENBONE_FEED_SYNC_USER`
Default Value	gvm
Description	If the greenbone-feed-sync script is run as root, the effective user is changed to this user name or ID.

greenbone-enterprise-feed-key

Name	Value
CLI Argument	`--greenbone-enterprise-feed-key`
Config Variable	greenbone-enterprise-feed-key
Environment Variable	`GREENBONE_FEED_SYNC_ENTERPRISE_FEED_KEY`
Default Value	/etc/gvm/greenbone-enterprise-feed-key
Description	File to read the Greenbone Enterprise Feed key from. The key gives access to additional vulnerability tests for enterprise software among other advantages. See Greenbone Enterprise Feed and Greenbone Community Feed in Comparison for more details. The default URLs are adjusted according to the data in the key. If the key file does not exist it is ignored.

Config

It is possible to use a config file for loading the settings of the greenbone-feed-sync script. The config file uses the TOML format. Without explicitly passing a config file, greenbone-feed-sync tries to load ~/.config/greenbone-feed-sync.toml and if that file doesn't exist afterwards /etc/gvm/greenbone-feed-sync.toml.

Example:

[greenbone-feed-sync]
destination-prefix = "/opt/greenbone-feed"
lock-file = "/opt/greenbone-feed.lock"
no-wait = true

Development

greenbone-feed-sync uses uv for its own dependency management and build process.

First install poetry via pipx

python3 -m pipx install uv

Afterwards activate the git hooks for auto-formatting and linting via autohooks.

uv run autohooks activate

Validate the activated git hooks by running

uv run autohooks check

Maintainer

This project is maintained by Greenbone AG

Contributing

Your contributions are highly appreciated. Please create a pull request on GitHub. Bigger changes need to be discussed with the development team via the issues section at GitHub first.

License

Licensed under the GNU General Public License v3.0 or later.

Metadata

Release files for greenbone-feed-sync 25.5.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for greenbone-feed-sync 25.5.0
File	Size	Uploaded
greenbone_feed_sync-25.5.0.tar.gz	102.8 kB	Oct 5, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for greenbone-feed-sync 25.5.0
File	Interpreter	ABI	Platform	Reset
greenbone_feed_sync-25.5.0-py3-none-any.whl 34.8 kB Oct 5, 2026	Python 3	none	any	Details

Total release size: 137.6 kB

Release files / greenbone_feed_sync-25.5.0.tar.gz

Download URL	greenbone_feed_sync-25.5.0.tar.gz
Size	102.8 kB
Tags	Source
SHA-256 checksum How to use checksums	`af207bb3b1d2a4b3a76751ce491828751ce3a097b6ae500477c0cd9459d200e4`
BLAKE2b-256 checksum How to use checksums	`d084f4dce3597313e2e20ab00ab103804e63cd2e8d9ee9c9a04746b7e3d1cbd0`
Upload date	Oct 5, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`uv/0.12.23 {"installer":{"name":"uv","version":"0.12.23","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}`

Release files / greenbone_feed_sync-25.5.0-py3-none-any.whl

Download URL	greenbone_feed_sync-25.5.0-py3-none-any.whl
Size	34.8 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`4bffa013a759bb18f7b51b3d3c16798d7a99eaa9737e04d453ffe067ee8b3669`
BLAKE2b-256 checksum How to use checksums	`369e5c94f585a287c6b2ca0c919a85a1e048dec3bd1539f6ed5f9ac852668444`
Upload date	Oct 5, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`uv/0.12.23 {"installer":{"name":"uv","version":"0.12.23","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}`

Release history Release notifications | RSS feed

This release

25.5.0 This release

Oct 5, 2026 2 release files

25.4.2

Aug 11, 2026 2 release files

25.4.1

Jul 15, 2026 2 release files

25.4.0

Jul 14, 2026 2 release files

25.3.0

Jun 17, 2026 2 release files

25.2.0

Jan 9, 2026 2 release files

25.1.7

Nov 19, 2025 2 release files

Pre-release

25.1.6.dev1

Oct 28, 2025 2 release files

25.1.5

Oct 14, 2025 2 release files

25.1.0

Feb 11, 2025 2 release files

25.0.1

Feb 7, 2025 2 release files

25.0.0

Feb 5, 2025 2 release files

24.9.0

Sep 27, 2024 2 release files

24.3.0

Mar 18, 2024 2 release files

24.1.1

Jan 31, 2024 2 release files

24.1.0

Jan 30, 2024 2 release files

23.10.0

Oct 23, 2023 2 release files

23.8.0

Aug 31, 2023 2 release files

23.7.0

Jul 13, 2023 2 release files

23.6.0

Jun 5, 2023 2 release files

23.4.0

Apr 13, 2023 2 release files

23.2.1

Feb 6, 2023 2 release files

23.2.0