Linux Cockpit Notes

1. What is Cockpit?

Cockpit is a web-based graphical interface for servers, intended for everyone, especially those who are:
* new to Linux
* familiar with Linux
* expert admins

Cockpit makes Linux discoverable. You don’t have to remember commands at a command-line.

See your server in a web browser and perform system tasks with a mouse. It’s easy to start containers, administer storage, configure networks, and inspect logs. Basically, you can think of Cockpit like a graphical “desktop interface”, but for individual servers.

— https://cockpit-project.org/

2. Install Cockpit

  1. Install

    Ubuntu
    sudo apt update && sudo apt install -y cockpit
    Fedora
    sudo dnf -y install cockpit

  2. Enable

    sudo systemctl enable --now cockpit.socket

3. Install Native Cockpit Applications

  1. Launch Cockpit via https://hostname:9090

  2. Enable Administrative access by clicking the Limited access button followed by authenticating with your password.

  3. Click the Applications menu item

  4. Install the following appplications and click the Install button to install them.

    1. Files

    2. Machines

    3. Podman

    4. SELinux

4. Install 3rd Party Cockpit Applications

4.1. File Sharing

4.1.1. Ubuntu

  1. Run

    curl -sSL https://repo.45drives.com/setup | sudo bash
    sudo apt update && sudo apt intall -y cockpit-file-sharing

4.2. Podman

  1. cd into your home folder

    cd

  2. Download git repo

    git clone https://github.com/cockpit-project/cockpit-podman

  3. cd into folder

    cd cockpit-podman

  4. Build the plugin

    make

  5. Install system-wide

    sudo make install

    • The module will be installed to /usr/share/cockpit/

4.3. ZFS

  1. cd into your home folder

    cd

  2. Download git repo

    git clone --recurse-submodules https://github.com/45Drives/cockpit-zfs.git

  3. cd into folder

    cd cockpit-zfs

  4. Build the plugin

    make
    This will take some time.

  5. Install system-wide

    sudo make install
    This will take some time too.

  6. Restart Cockpit

    sudo systemctl restart cockpit.socket

    • The module will be installed to /usr/share/cockpit/zfs/

4.4. ZFS Old

  • Doc is here.

    1. cd into your home folder

      cd

    2. Download git repo

      git clone https://github.com/45drives/cockpit-zfs-manager.git

    3. Copy

      sudo cp -r cockpit-zfs-manager/zfs /usr/share/cockpit

    4. Restart Cockpit

      sudo systemctl restart cockpit

5. Install Cockpit MFA Support

Copilot with GPT-4 generated the install steps.

  1. Install Packages

    Ubuntu
    sudo apt-get install libpam-google-authenticator libqrencode-dev -y
    Fedora
    sudo dnf -y install libpam-google-authenticator libqrencode-dev

  2. Generate the MFA Secret

    Run the google-authenticator command with the appropriate flags. This will generate a QR code that you can scan with your authenticator app, as well as some backup codes. Make sure to save these in a safe place:

    google-authenticator -t -d -f -r 3 -R 30 -W -Q UTF8

  3. Configure PAM

    Add the Google Authenticator module to the PAM configuration for Cockpit. This can be done by appending a line to the /etc/pam.d/cockpit file:

    sudo bash -c 'echo "auth required pam_google_authenticator.so nullok" >> /etc/pam.d/cockpit'

  4. Restart Cockpit

    sudo systemctl restart cockpit

  5. Test MFA

    Log out of Cockpit and log back in. You should be prompted to enter your username and password, followed by a one-time password (OTP) generated using the ffx provider.

    That’s it! You have now added MFA to Cockpit.

    Remember to keep your secret key secure and do not share it with anyone

  6. Configure Nginx Proxy Manager entry with:

    1. Websockets Support

    2. Scheme: https