View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0004374||Kali Linux||[All Projects] Kali Package Improvement||public||2017-11-29 17:19||2019-01-18 15:27|
|Target Version||Fixed in Version|
|Summary||0004374: Please update the metasploit-framework package to track the 4.x branch|
|Description||We are transitioning master to a new major version for Metasploit Framework. Because it will be development, it would be best if metasploit-framework distributions used the 4.x branch for now until 5.x is stable.|
Can you please update Kali to package from the 4.x branch for now?
See https://github.com/rapid7/metasploit-framework/pull/9259 for more information.
|Additional Information||We'd also be happy to hear what you would like to see out of a major new Metasploit Framework, as a training company and a distributor.|
Well noted. We won't package version 5.x until it's stable.
We track the tagged releases in github. Will you make releases of "unstable" version 5.x before it's stable?
We are planning to release some pre-5.0 releases sometimes in spring/summer 2018.
||Hi, we are aiming for January 10th for making a 5.x branch and the release of the first 5.0 stable release. Just a heads-up for your packagers (and I believe you are also upstream for Parrotsec as well).|
Of note, the 'msfdb' command is now integrated into the source tree as well, since it includes some functionality for exposing some of Metasploit's new REST web services for the database layer.
However, this release is still 100% compatible with a local database, and still works with no database at all, so it should still work with Kali's variant of the msfdb command for now. We plan on making future changes to the data model in a new unstable branch however, after 5.0 is released.
||We tagged 5.0.0 today in master. We are not ready to open a 5.x branch yet, and will continue maintaining the 4.x branch for the next few months as well. If you want to start looking at packaging the new features with MSF5, feel free to start testing on the 5.x.y tag series. Thanks!|
Thanks @busterb. We are looking into packaging Metasploit 5.0.0. We have some trouble with your new "msfdb" script... it assumes pg_ctl is available in the PATH, it's not the case in Debian/Kali currently because the Debian packaging provides some higher level tool called "pg_ctlcluster" which makes it easy for admins to run multiple PostgreSQL servers side-by-side. pg_ctl is only available in a versioned directory (/usr/lib/postgresql/11/bin/)
pg_ctlcluster will automaticaly use ports 5433 and higher for new "clusters" that it creates. This means that I expect your msfdb to run into troubles on machines where those port numbers are already used for alternate databases (this happens in particular when you upgrade from one version of PostgreSQL to the next, this higher level tool is able to migrate a database by running two different versions of PostgreSQL side by side). Hence I would suggest to rather use port 5431 as an alternate port number (we will patch this in our packaging).
We will probably somehow expand the PATH so that msfdb is able to find pg_ctl but it would be better if we could somehow teach "msfdb init" to:
- eitheir use "pg_createcluster" and "pg_lsclusters" directly (the downside being that you have to know/find out the current version of PostgreSQL)
- or reuse an existing cluster and just setup the new database inside that cluster
The term "cluster" refers to a postgresql data directory and its associated configuration, it's specific to a given version of PostgreSQL
As a general goal, we made sure that the the 5.x series continue to also work with the Kali Linux-specific version of the msfdb tool, so if you prefer for now, you can continue to ship the version that is in the 4.x package and the database will continue to function as it did before.
I'll share this with the team as well to make sure we can address the items above as well. Thanks for the update!
I uploaded the version 5.0.1-0kali1 in kali-experimental. autopackage tests run successfully now.
For the moment we keep our msfdb version.
|2017-11-29 17:19||busterb||New Issue|
|2017-11-30 13:47||sbrun||Assigned To||=> sbrun|
|2017-11-30 13:47||sbrun||Status||new => assigned|
|2017-11-30 13:47||sbrun||Note Added: 0007642|
|2017-12-27 21:50||busterb||Note Added: 0007751|
|2018-10-30 11:27||g0tmi1k||Product Version||kali-dev =>|
|2018-12-11 17:02||busterb||Note Added: 0010101|
|2018-12-11 17:07||busterb||Note Added: 0010102|
|2019-01-10 18:14||busterb||Note Added: 0010197|
|2019-01-11 11:30||rhertzog||Note Added: 0010199|
|2019-01-11 14:59||busterb||Note Added: 0010200|
|2019-01-18 15:27||sbrun||Note Added: 0010227|