Issues installing OWASP ZAP on Nvidia Workbench AI

AI & Data Science NVIDIA AI Workbench
1

Hi everyone! I’m fairly new to this, so I apologize in advance if this is a basic question. I’m building a generative AI app that uses OWASP ZAP, and I need to start it to obtain the API Key. Ideally, I’d like everything to be done from the same repository.

I’ve followed the steps to install zapproxy from apps section, but when I try to build, it says the application can’t be found. I also tried adding the repository in the pre and post build scripts, but I get an error saying the add-apt-repository command is not recognized.

Are there any other alternatives I could use to install this type of application on my project in Nvidia Workbench AI? Any help would be greatly appreciated.

Thanks in advance!

Please tick the appropriate box to help us categorize your post
Bug or Error
Feature Request
Documentation Issue
Other

2

Hi. Thanks for posting. Not a basic question at all.

Following answer is based on quick google search, so it could be outdated.

If you install it using the package manager feature, then you can access it in your post-build script. Note you won’t be able to access it in your pre-build script.

To answer the question on the application not being found, we’d need to know if things were configured correctly or incorrectly.

It could also be some issues around the AI Workbench proxy as well.

Tyler

1 Like
3

You could try running the following commands in post-build script ( postBuild.bash )

echo 'deb http://download.opensuse.org/repositories/home:/cabelo/xUbuntu_22.10/ /' | sudo tee /etc/apt/sources.list.d/home:cabelo.list
curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.10/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_cabelo.gpg > /dev/null
sudo apt update
sudo apt install owasp-zap
1 Like
4

It works! Huge thanks to both Bfurtaw and twhitehouse for helping me figure out what was going wrong. Yesterday, I tried a similar approach, and although the package was downloaded and prepared for installation - “40 MB ready to be downloaded”- it would fail without providing any error message. The same happened when using twhitehouse’s solution of installing software-properties-common.

One crucial point: if you’re encountering this issue, it’s essential to force the acceptance during the package installation. This step can make all the difference, as the installation might otherwise hang or fail without explanation. The command you should use is:

echo 'deb http://download.opensuse.org/repositories/home:/cabelo/xUbuntu_22.10/ /' | sudo tee /etc/apt/sources.list.d/home:cabelo.list
curl -fsSL https://download.opensuse.org/repositories/home:cabelo/xUbuntu_22.10/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_cabelo.gpg > /dev/null
sudo apt update
sudo apt install owasp-zap -y
1 Like
5

Awesome. We are happy to help, and thanks for making sure to add that pointer.

Good luck!!!

1 Like