NGINX Instance Manager Offline Documentation
This document explains how to NGINX Instance Manager in environments without internet access.
NGINX Instance Manager is designed to run independent of internet access in most cases.
All dependenencies are included with the packages.
We do connect to the internet to get a list of the current CVEs to use with the scan function. To manually update this list, you can download and overwrite the
cve.xml file in the
Download the cve file
$ curl -s http://hg.nginx.org/nginx.org/raw-file/tip/xml/en/security_advisories.xml > /usr/share/nginx-manager/cve.xml
Rerun the scan. You may need to restart the nginx-manager service if it is not being picked up but NGINX Instance Manager is designed to check the internet for a copy then use the local copy if it cannot be found. Run the curl command and change the location it writes to, then copy the file into that directory on the nginx-manager server. This updated the CVE list for NGINX Scan functions.