Extra "db" string in the trivy cache path.

[CsorbaRobertAlfa]

Description

I use the trivy server with the following systemd unit file:

[Unit]
Description="Aquasecurity Trivy."
After=network-online.target
StartLimitIntervalSec=520
StartLimitBurst=2

[Service]
UMask=027

Type=simple
RemainAfterExit=True
ProtectKernelModules=True
ProtectHome=True
RestrictSUIDSGID=True
NoNewPrivileges=True
PrivateTmp=True
ProtectSystem=full
PrivateDevices=True
Restart=on-failure
TimeoutStartSec=520

Environment=TRIVY_CACHE_DIR="/var/cache/trivy/subpath"
Environment=TRIVY_CACHE_BACKEND="redis://localhost:6379"
Environment=TRIVY_LISTEN="127.0.0.1:4954"
Environment=TRIVY_CACHE_TTL="3600s"
Environment=TRIVY_NO_PROGRESS="true"
Environment=TRIVY_TIMEOUT="1800s"
Environment=TRIVY_DEBUG="true"
Environment=TRIVY_QUIET="false"
Environment=TRIVY_JAVA_DB_REPOSITORY="<corporate_repository>/aquasecurity/trivy-java-db:1"
Environment=TRIVY_DB_REPOSITORY="<corporate_repository>/aquasecurity/trivy-db:2"
Environment=TRIVY_CHECKS_BUNDLE_REPOSITORY="<corporate_repository>/aquasecurity/trivy-checks:0"

ExecStartPre=/usr/bin/trivy image --download-java-db-only
ExecStartPre=/usr/bin/trivy image --download-db-only
ExecStartPre=/usr/bin/trivy --version
ExecStart=/usr/bin/trivy server

[Install]
WantedBy=multi-user.target

I noticed an extra string has been added to the trivy cache path. (see below in the debug output)

Desired Behavior

ls -lsa /var/cache/trivy/subpath/db/metadata.json
4.0K -rw-r--r--. 1 root root 152 Aug 23 14:48 /var/cache/trivy/subpath/db/metadata.json

Actual Behavior

ls -lsa /var/cache/trivy/subpath/db/db/metadata.json
ls: cannot access '/var/cache/trivy/subpath/db/db/metadata.json': No such file or directory

Reproduction Steps

Upgrade trivy from version 0.51.1 to version 0.54.1

Target

None

Scanner

None

Output Format

None

Mode

Client/Server

Debug Output

DEBUG        Failed to get DB metadata        err="unable to open a file: open /var/cache/trivy/subpath/db/db/metadata.json: no such file or directory"
DEBUG        Failed to get Java DB metadata        err="unable to open a file: open /var/cache/trivy/subpath/db/java-db/metadata.json: no such file or directory"
DEBUG        Failed to open the check metadata        err="open /var/cache/trivy/subpath/db/policy/metadata.json: no such file or directory"
DEBUG        Failed to get policy metadata        err="open /var/cache/trivy/subpath/db/policy/metadata.json: no such file or directory"

Operating System

OracleLinux 8.10

Version

Version: 0.54.1

Checklist

• Run trivy clean --all
• Read the troubleshooting

[knqyf263]

It's not expected. @afdesk Can you please take a look?

[afdesk]

Hi @CsorbaRobertAlfa! thanks for the report!
it seems I could reproduce your issue:

$ ls -l ~/Library/Caches/trivy
total 0
drwxr-xr-x  4 user  staff  128 27 Aug 00:25 db
drwx------  3 user  staff   96 26 Aug 14:02 fanal
drwxr-xr-x@ 4 user  staff  128 16 Aug 12:45 java-db
drwxr-xr-x@ 4 user  staff  128 19 Aug 19:47 policy
drwx------  4 user  staff  128 27 Aug 01:15 subpath

a new folder has created without read access for another users.

[afdesk]

created #7395

[knqyf263]

@afdesk Please create an issue first to describe the problem.

[afdesk]

@afdesk Please create an issue first to describe the problem.

I have no permissions to create a new issue (

[afdesk]

@CsorbaRobertAlfa you can track #7399
thanks!

[afdesk]

I reopened this discussion for a while I'm retesting it

[afdesk]

@CsorbaRobertAlfa I managed to reproduce your error messages. it seems there are no files in your subfolder, so Trivy can't check a version.

I see you use a custom repository for the script.
Could you confirm that Trivy works correctly without subfolder?
thanks

trivy -v --cache-dir ~/Library/Caches/trivy -d
2024-09-02T19:13:11+06:00	DEBUG	Cache dir	dir="/Library/Caches/trivy"
2024-09-02T19:13:11+06:00	DEBUG	Failed to get Java DB metadata	err="unable to open a file: open ~/Library/Caches/trivy/java-db/metadata.json: no such file or directory"
2024-09-02T19:13:11+06:00	DEBUG	Failed to open the check metadata	err="open ~/Library/Caches/trivy/policy/metadata.json: no such file or directory"
2024-09-02T19:13:11+06:00	DEBUG	Failed to get policy metadata	err="open ~/Library/Caches/trivy/policy/metadata.json: no such file or directory"
Version: 0.54.1
Vulnerability DB:
  Version: 2
  UpdatedAt: 2024-09-02 12:13:01.826120224 +0000 UTC
  NextUpdate: 2024-09-02 18:13:01.826119422 +0000 UTC
  DownloadedAt: 2024-09-02 13:13:03.334095 +0000 UTC
$ ls -lsa ~/Library/Caches/trivy                        
total 0
0 drwxr-xr-x   4 amf  staff   128  
0 drwx------+ 98 amf  staff  3136
0 drwxr-xr-x   4 amf  staff   128 
0 drwx------   3 amf  staff    96