Blog posts

Category: Release

Cockpit 159

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 159.

Configure data deduplication with VDO devices

The “Virtual Data Optimizer” is a new feature to eliminate duplication and add compression to block devices. This is mostly aimed at providing storage for virtual machines or object storage systems like Ceph.

This is being developed upstream by the dm-vdo GitHub project. It is currently available in RHEL 7.5 alpha and expected to land in other distributions eventually.

Cockpit’s Storage page can now create and configure VDO devices. See it in action:

Add serial console to virtual Machines page and redesign the Consoles tab

The Machines page has offered in-browser and external VNC console access to virtual machines for some time. However, this does not work on “headless” virtual machines that don’t provide a (virtual) graphics card and VNC libvirt device. The Consoles tab now offers a serial console for these kind of VMs to be able to administer them from Cockpit as well.

This went along with a redesign of the Consoles tab to better fit the various types of consoles.

See it in action:

Thanks to Marek Libra for this feature!

Show more error message details for VM failures on virtual Machines page

Errors from virtual machine operations on the Storage page can now be expanded to show more details:

VM error expander

Thanks to Marek Libra for this improvement!

Try it out

Cockpit 159 is available now:

Cockpit 158

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 158.

Add check boxes for common NFS mount options

Setting up an NFS mount point on the Storage page now offers check boxes for the most common mount options: “Mount at boot” and “Mount read only”. Other arbitrary options can still be given in the “Custom” input line, as before.

NFS option checkboxes

Clarify Software Update status if only security updates are available

In that case the status message is now “n security fixes” instead of “n updates, including n security fixes”.

Create self-signed certificates with SubjectAltName

When connecting to Cockpit through SSL (https://…) without explicitly configuring a certificate, Cockpit generates a self-signed one. This certificate now has a SubjectAltName: field that is valid for localhost/ Some browsers, like Chromium, require this field to accept a certificate for an SSL connection.

This allows administrators or users to import Cockpit’s certificate into the system oder user certificate database so that web browsers can connect to Cockpit without SSL errors:

openssl s_client -connect < /dev/null | \
    sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/cert.pem
certutil -d sql:$HOME/.pki/nssdb -A -t "TC,C,P" -n cockpit -i /tmp/cert.pem

Try it out

Cockpit 158 is available now:

Cockpit 157

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 157.

Virtual Machine network devices

The Machines page overview lists all libvirt defined virtual machines, which now have a “Networks” tab. This shows the virtual machine’s network devices and buttons to plug/unplug them.

Thanks to Bohdan Iakymets for this feature!

virtual machine networks

The Apps page now displays SVG app icons

Before only PNG icons were supported.

Thanks to jeepingben for this feature!

Try it out

Cockpit 157 is available now:

Cockpit 156

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 156.

Redesign main navigation and support mobile browsing

The top-level dashboard menus and second-level menus of them have been redesigned to clarify the structure, be more extensible, and use less vertical screen space:

desktop mode

This version introduces proper support for using on mobile phones and tablets. As part of this, the login screen was rearranged in mobile mode to avoid overlapping the on-screen keyboard with the user/password input fields:

mobile mode with menu   mobile login page

Applications on the Apps page now show a link to the project home page, if provided in the AppStream metadata:

apps homepage link

Thanks Benjamin Deering for this feature!

Support alternate Kerberos keytabs

If present, Cockpit will now use the Kerberos /etc/cockpit/krb5.keytab file instead of the default system keytab /etc/krb5.keytab.

See the Single Sign On documentation for details.

Maintain an /etc/issue(5) file with current Cockpit status

Cockpit now maintains a /run/cockpit/issue file with instructions how to enable Cockpit (when disabled) or the Cockpit URL (when enabled).

The next util-linux 2.32 release will support /etc/issue.d/*.issue drop-ins. Distributions or users can make use of this by installing an /etc/issue.d/01-cockpit.issue symlink to the above file.

Use event-driven refresh of oVirt virtual machine data instead of polling

This makes the page much more reactive and use less resources.

Thanks to Marek Libra for this improvement!

Try it out

Cockpit 156 is available now:

Cockpit 155

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 155.

NFS client support

The Storage page now shows currently mounted NFS volumes and offers to mount/unmount them. Note that this does not yet support Kerberos authentication; for now this relies on the classic hosts.allow/hosts.deny ACLs.

See it in action:

Add “Maintenance” switch for oVirt hosts

Switching a host to maintenance mode causes all VMs to be migrated to another running oVirt host.

oVirt Maintenance mode

Fix Terminal rendering issues in Chrome

Console programs like Midnight Commander which use graphical characters were previously distorted in the Terminal in the Chrome Browser.

Improve Ctrl+W behaviour in the Terminal

Ctrl+W is commonly being used in a Terminal shell to delete the last word, but in web browsers it closes the current window or tab. Cockpit now causes a confirmation dialog to pop up on Ctrl+W when the Terminal is focussed to avoid accidental closing.

Support the upcoming OpenShift 3.7 release

When available, use the rbac.authorization API instead of the policybinding API for determining project permissions. OpenShift 3.7 now properly supports the former and stops supporting the latter. Cockpit remains compatible with older OpenShift releases.

Try it out

Cockpit 155 is available now:

Cockpit 153

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 153.

Add oVirt package

This version introduces the “oVirt Machines” page on Fedora for controlling oVirt virtual machine clusters. This code was moved into Cockpit as it shares a lot of code with the existing “Machines” page, which manages virtual machines through libvirt.

This feature is packaged in cockpit-ovirt and when installed it will replace the “Machines” page.

oVirt overview

Packaging cleanup

This release fixes a lot of small packaging issues that were spotted by rpmlint/lintian.

Try it out

Cockpit 153 is available now:

Cockpit 152

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 152.

Add Applications page

This version introduces the “Applications” tool page. This is an extension point for third-party software to add themselves to the Cockpit interface, by shipping appropriate AppStream metadata.

Note that at the moment there are no real Cockpit applications available yet. For testing this feature on Fedora, Marius Vollmer provides a COPR repository that can be enabled with these commands:

dnf copr enable mvo/cockpit-app-freeipa
dnf install appstream-data-mvo

See it in action:

Add automatic update configuration for dnf to Software Updates

On Fedora ≥ 26, the Software Updates page now offers to enable and configure dnf-automatic for automatic daily or weekly updates.

For now this is only shown if the dnf-automatic package is already installed. Future Cockpit versions will install that on demand, and also cover Debian/Ubuntu systems.

Automatic Updates

Fix cockpit-bridge crash if /etc/os-release does not exist

Some environments (particularly Docker containers) might not have an /etc/os-release file, which cockpit-bridge previously required.

Try it out

Cockpit 152 is available now:

Cockpit 151

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 151.

Support loading SSH keys from arbitrary paths

The User menu’s Authentication dialog now supports entering arbitrary paths to SSH keys for adding to the SSH authentication agent. Previously this only offered keys present in the standard ~/.ssh home directory.

See it in action:

Support X-Forwarded-Proto HTTP header for Kubernetes

Newer Kubernetes versions support reading the X-Forwarded-Proto HTTP header, which helps to determine whether or not a client used SSL to connect to an intermediate proxy, load balancer, or similar. Cockpit’s Kubernetes (Cluster) dashboard now sets this header. Earlier versions have already done that when hosted in OpenShift.

Fix Kubernetes connection hangs

The previous Cockpit release 150 introduced a regression when connecting to Kubernetes clusters. In some cases, like specifying a wrong server name or when the Cluster did not send Authentication Provider information, the connection attempt would hang indefinitely. This version corrects this bug.

Try it out

Cockpit 151 is available now:

Cockpit 150

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from versions 149 and 150.

Add information about unmet conditions for systemd services

Systemd units can have conditions which must be met in order for the service to start. Cockpit now shows unmet conditions in the details of a service, so that users can see why a service is in active.

Unmet systemd service conditions

Automatically enable and start newly created timers on the Services page

Cockpit allows the user to create custom systemd timers on the Services page, to run commands at particular times or after boot. Previously they had to be explicitly enabled and started to become effective; this now happens automatically.

Support Kubernetes authentication providers in kube config files

Some kubernetes deployments such as Google Compute Engine use Kubernetes authentication providers so that they can automatically regenerate their access token when needed. Cockpit now supports kube config files using this format.

Support sending non-maskable interrupt to VMs

The Shut Down button on the Machines page got a new option “Send Non-Maskable Interrupt”. This normally does not trigger a reaction (other than a kernel message), but the Linux kernel can be configured to react to this with a kernel panic. This allows administrators to debug hung virtual machines.

Machines NMI

Support Dashboard installation into OSTree overlay

The cockpit-dashboard package can now be installed as package overlay into rpm-ostree. This enables managing multiple remote servers through one Cockpit instance on Atomic based systems.

Previously, after logging out (explicitly or due to session timeout) it could happen that revisiting a seen page would show a cached version instead of the login page. This has now been fixed by properly clearing Cockpit’s browser cookie.

Try it out

Cockpit 150 is available now:

Cockpit 148

Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 148.

Support Cockpit in Internet Explorer

When using Microsoft Windows Internet Explorer, navigating between pages and various other operations caused lost state changes, flickering, and lots of JavaScript errors. These have been corrected, and automatic tests now run with Internet Explorer as well.

Update Cluster/Registry design for image streams

The design of the image streams on the Cluster and Registry pages has been updated to match the design of the current OpenShift Web Console.

Image Stream Tag Design

Delete OpenShift session tokens on logout

If the Registry Console or Dashboard creates a new OpenShift session token on login, it will now delete that token again on logout. This behaviour now matches what the OpenShift Web Console does.

Detect unregistered RHEL systems on Software Updates page

On RHEL systems which have not yet been registered or whose registration expired, the Software Page would previously have claimed that “the system is up to date”. Now it detects if the system is unregistered and thus cannot receive updates:

Software Updates on unregistered RHEL system

Try it out

Cockpit 148 is available now: