Make swagger-blocks a default dependency

[dwelch-r7]

swagger-blocks is a necessary gem for running the metasploit web service, currently if you install without the development and test groups you don't get swagger-block installed and so the web service fails to start

Adding BUNDLE_WITHOUT: "development:test" to your bundle config should allow you to replicate the issue

Example stacktrace from before:

/usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/zeitwerk-2.4.2/lib/zeitwerk/kernel.rb:34:in `require': cannot load such file -- swagger/blocks (LoadError)
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/zeitwerk-2.4.2/lib/zeitwerk/kernel.rb:34:in `require'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/activesupport-5.2.5/lib/active_support/dependencies.rb:291:in `block in require'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/activesupport-5.2.5/lib/active_support/dependencies.rb:257:in `load_dependency'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/activesupport-5.2.5/lib/active_support/dependencies.rb:291:in `require'
        from /usr/share/metasploit-framework/lib/msf/core/web_services/metasploit_api_app.rb:3:in `<top (required)>'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/zeitwerk-2.4.2/lib/zeitwerk/kernel.rb:26:in `require'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/zeitwerk-2.4.2/lib/zeitwerk/kernel.rb:26:in `require'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/activesupport-5.2.5/lib/active_support/dependencies.rb:291:in `block in require'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/activesupport-5.2.5/lib/active_support/dependencies.rb:257:in `load_dependency'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/activesupport-5.2.5/lib/active_support/dependencies.rb:291:in `require'
        from /usr/share/metasploit-framework/msf-ws.ru:16:in `block in <main>'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/rack-2.2.3/lib/rack/builder.rb:125:in `instance_eval'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/rack-2.2.3/lib/rack/builder.rb:125:in `initialize'
        from /usr/share/metasploit-framework/msf-ws.ru:1:in `new'
        from /usr/share/metasploit-framework/msf-ws.ru:1:in `<main>'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/lib/rack/adapter/loader.rb:33:in `eval'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/lib/rack/adapter/loader.rb:33:in `load'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/lib/thin/controllers/controller.rb:182:in `load_rackup_config'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/lib/thin/controllers/controller.rb:72:in `start'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/lib/thin/runner.rb:203:in `run_command'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/lib/thin/runner.rb:159:in `run!'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/gems/thin-1.8.0/bin/thin:6:in `<top (required)>'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/bin/thin:23:in `load'
        from /usr/share/metasploit-framework/vendor/bundle/ruby/2.7.0/bin/thin:23:in `<main>'

Verification

• bundle install without the development and test groups
• Verify that webservice can start up via msfdb

[gwillcox-r7]

Release Notes

The swagger-blocks dependency has been marked as a default dependency for all installs, preventing cases where if a user did not install the development and tests groups, they would be unable to start the web service.