Manage your system’s storage. Supports local partitions, encryption, NFS, RAID, iSCSI, and more.

Manage your network interfaces and edit your firewall with ease.

See and apply updates to your system. Supports RPM and DEB based systems through PackageKit.

Upgrade OSTree-based systems.

Create, run, and manage virtual machines.

Download, use, and manage containers. (Podman replaces Docker.)

View and manage SELinux exceptions. Instantly apply overrides and export your rules to apply to other systems.

Debugging the Linux kernel? This kdump add-on helps with catching stack traces.

Collect system configuration and diagnostic information from systems, to help with diagnosing problems.

A featureful file browser.

On-premise frontend for image building. It allows users to create, manage, and compose custom operating system images, with images stored locally.

A web-based interface to the enterprise-class Open Source LDAP server for Linux.

Session recording configuration and playback based on Scribery, to record a user’s actions for watching later.

Manage subscriptions to Red Hat Enterprise Linux.

Manage Pacemaker based clusters with PCS.

Upgrade systems based on transactional-update from OpenSUSE with tukit.

Manage package manager repositories on SUSE/openSUSE systems

Manage your SUSE Linux Enterprise subscriptions.

Install/Uninstall packages.

Manage bootloader configurations.

Interactive ZFS on Linux administration.

Easily manage Samba and NFS file sharing.

A featureful file browser.

A storage benchmark utility.

List all available sensors on the machine provided by lm-sensors.

Manage Tailscale.

Manage Tailscale connections and configure the Tailscale client (SSH, DNS, subnet routes, exit nodes, hostname, automatic updates) with a searchable peers overview.

Manage Headscale coordination server.

Show Cloudflare tunnel state.

A lightweight interface for simple management of docker containers.

A lightweight interface for simple back up to Backblaze B2.

View ROS 2 diagnostics.

DEB (APT) / RPM browsing and installation tool using PackageKit.

Manage firewalld port forwarding rules and masquerading.

Manage sudo policy on Linux systems in a structured, auditable, and policy-driven way. Developed for SUSE Linux.

A modern web-based management interface for BIND DNS servers

Arch Linux package management using direct alpm.rs integration.

Torrent management backed by libtorrent. Add torrents via .torrent file or magnet link, set per-torrent and per-file download priorities, and monitor speeds, peers, and trackers in real time. Includes one-click Start/Stop for the Download Superstation systemd service.

Manage systemd-nspawn containers. Create, start, stop, and back up lightweight system containers with full systemd support — directly from Cockpit. No Docker required.

Dashboard to manage Docker Compose stacks with live status view. See logs, edit and restore Compose yaml files and more to come.

OpenSCAP compliance scanning, profile tailoring, and selective remediation for RHEL 10 and CentOS Stream 10. Scan hosts and container images against SCAP Security Guide profiles, tailor rules to your environment, and download or apply remediation scripts — directly from the Cockpit browser console.

A file manager for the Cockpit console: multi-tab and two-pane browsing, search, a paging preview viewer (text, images, PDF, rendered HTML, and video transcoded on the host when the browser can’t decode it), a Monaco/Quill editor, integrated terminals with tmux, and GitHub integration via the gh CLI. Also runs the Claude Code and Codex CLIs in AI tabs with a live git diff and repo tree, adds an scc-powered code census with PDF/JSON reports, custom shell actions, and system tools: an fstab mounts editor, a GRUB editor, Users & sudo management, and a Plugin Manager that installs and updates all six plugins. Pure HTML/CSS/JS with no build step and no server daemon.

An IPTV client for the Cockpit console: Live TV, movies, series, an EPG guide grid, and multi-account tabs from Xtream Codes or M3U sources, remuxed/transcoded on the host with ffmpeg (GPU NVENC first, then CPU x264) and streamed as HLS. Includes a minimizable player, audio and subtitle track selection, a personal library (favorites, custom lists, watch-later, continue watching, history), a size-capped segment cache with a persistent poster/logo cache, and encrypted backup export/import.

A btop-style system monitor for the Cockpit console: per-core CPU with braille graphs, memory/disk/network meters, GPU and hwmon sensors with fan RPM, live podman/docker container stats, and a sortable process table with kill/signal, renice, tree view, and deep-links into Cockpit services, logs, and Cockpit Files or Explorer. Loads any installed btop .theme file, offers threshold alerts with browser notifications, optional back-in-time CPU history from PCP, and one-click self-update. Plain ES modules and <canvas>, no framework and no runtime dependencies.

A download manager for the Cockpit console: torrents, magnets, and HTTP/FTP/Metalink files driven by a turnkey-provisioned, per-user aria2c daemon. Quick Add and Paste-to-Queue, bulk row actions, per-file torrent selection, a docked detail panel with Files/Peers/Trackers tabs, live-applied settings plus an advanced editor for every aria2 option, 13 themes, and in-UI self-update. Pure HTML/CSS/JS with no build step and no server daemon of its own, with “Open folder” deep-links into Explorer and Cockpit’s built-in Files.

A Cockpit plugin for managing a local MicroShift instance: service status/restart, apiserver + node health, pod listing, a generic browser for the core resource kinds, and a log tail — all via cockpit.spawn(), no separate backend daemon.

Installs and manages a self-hosted RustDesk remote-desktop server from the Cockpit console: the hbbs/hbbr pair plus the rustdesk-api control plane. A provisioning wizard shows the exact plan, then runs it with a live transcript on this machine or a remote host over SSH, with optional TLS via Caddy (own domain, sslip.io, or DuckDNS). Day-2 management covers devices, address books, users and groups, audit logs, service status and restarts, key rotation, and updates from GitHub releases.

Backups for the Cockpit console: scheduled, deduplicated, encrypted restic backups run from systemd timers, with automatic retention thinning and a Logbook that FUSE-mounts any snapshot for point-in-time browsing and restore. Destinations include local disk, USB, SFTP, a REST server, S3, Backblaze B2, Azure, Google Cloud Storage, and any rclone remote. Builds a bootable ReaR rescue image for bare-metal recovery, and can boot it in a throwaway libvirt VM to verify the restore completes.