How would Cockpit compare with http://vestacp.com/ ?
Cockpit – Administer Linux servers via a web browser
31–40 of 152 posts
Re: Cockpit – Administer Linux servers via a web browser
#32Re: Cockpit – Administer Linux servers via a web browser
#33Does it work on non fedora/redhat? Does it need an agent on managed systems? I'm developing a somewhat similar system[1], based purely on very easy to develop plugins, agentless, and integration with third parties where needed (Prometheus, for example).But without big corporate backup it is being difficult to keep the development pace. [1] https://github.com/serverboards/serverboards/
Seems to work just fine on Debian as well.
Re: Cockpit – Administer Linux servers via a web browser
#34How much of an added security risk does adding a web-based admin interface (to the usual ssh tunnel) represent?
SSH has a lot of neat features that mitigate MITM, Eavesdropping, Bruteforcing etc. Where a Web-based Admin Interface should have SSL and maybe some protection against bruteforcing. Plus, you get all the vulns that come with the modern web
Hopefully they're properly defending against XSS and not going to pull a Filet-o-Firewall
[https://github.com/filetofirewall/fof http://www.kb.cert.org/vuls/id/361684]
Re: Cockpit – Administer Linux servers via a web browser
#35How much of an added security risk does adding a web-based admin interface (to the usual ssh tunnel) represent?
SSH has a lot of neat features that mitigate MITM, Eavesdropping, Bruteforcing etc. Where a Web-based Admin Interface should have SSL and maybe some protection against bruteforcing. Plus, you get all the vulns that come with the modern web
Add nginx/apache with client certificate authentication in front of this and most of those concerns go away. Plus this way you don't have to worry about exposing the port but you need to distribute your client keys before hand.
Re: Cockpit – Administer Linux servers via a web browser
#36Personally I'd much rather see a GUI that can help string together snippets of Terraform/CFN and Ansible/Chef/Puppet/Salt/whathaveyou. A visual IDE for infrastructure automation, if you will.
Yeah I also wish there was some good Config Management IDEs. I think someone like InteliJ might be able to make a decent one.
Re: Cockpit – Administer Linux servers via a web browser
#37I tried it on my fedora 26 last year and my impression is that it has a far way to go and a lot of problems to resolve on the way.
It's nowhere near a complete server administration product that will let you avoid the terminal.
Perhaps for simple tasks but I fail to see the purpose.
Re: Cockpit – Administer Linux servers via a web browser
#38Does it work on non fedora/redhat? Does it need an agent on managed systems? I'm developing a somewhat similar system[1], based purely on very easy to develop plugins, agentless, and integration with third parties where needed (Prometheus, for example).But without big corporate backup it is being difficult to keep the development pace. [1] https://github.com/serverboards/serverboards/
If this is the same as this site talks about, https://access.redhat.com/documentation/en-us/red_hat_enterp..., then it would seem to be a first class citizen.
Re: Cockpit – Administer Linux servers via a web browser
#39Re: Cockpit – Administer Linux servers via a web browser
#40Why does it require that the server has password logins enabled? This seems contrary to every "secure your server" guide I've seen and opens your server up to the password guessing game. It seems like a cool product, but that's a huge non-starter.
The target server will need to have password based authentication enabled in sshd. When this is setup for the first time, Cockpit will ensure that the user connected to primary server has the same password on the secondary server.