Ripe for a supply chain attack. What safeguards do they have to protect against one?
Well you can use it via ssh so you don't have to open it up to the Internet directly.
Cockpit is a web-based graphical interface for servers
41–50 of 188 posts
Re: Cockpit is a web-based graphical interface for servers
#42What is the use case for this over standard command line tools like systemctl, journalctl, top, docker ps?
I use it for certain use cases, where it definitely is more convenient. For example, adding a new user or adding an ssh key for a user or debugging SELinux issues.
Re: Cockpit is a web-based graphical interface for servers
#43Re: Cockpit is a web-based graphical interface for servers
#44Earlier quoted context omitted.
Web UIs are nicer to deal with for simpler tasks. You can use this on your phone easily. Less technical users can be instructed on how to perform simple tasks like remotely powering off a machine.
Is the overhead of such tools, and added attack surface, justified over sshing and issuing a shutdown command though?
You can just run it via ssh anyway....
Re: Cockpit is a web-based graphical interface for servers
#45I don't mind UI, but I think it's a bad approach.
Instead of hiding all those complexities of the server behind UI, I would like to see each part of the application teach me how to achieve the same result in CLI. That would be useful for people to teach themselves, because UI comes and goes but basic linux commands - will stay
Re: Cockpit is a web-based graphical interface for servers
#46I don't mind UI, but I think it's a bad approach. Instead of hiding all those complexities of the server behind UI, I would like to see each part of the application teach me how to achieve the same result in CLI. That would be useful for people to teach themselves, because UI comes and goes but basic linux commands - will stay
Comes and goes? Webmin would like a word
Re: Cockpit is a web-based graphical interface for servers
#47I've used this before in the early days of my Linux SysAdmin work, especially in the homelab. It's pretty solid , but the limited amount of projects and lack of visibility into the CLI it uses on the backend hinder the ability to translate sysadmin work into tangible Linux skills, so I dumped it at home in favor of straight SSH sessions and some TUI stuff. That said, if I gotta babysit Linux in an Enterprise without…
Part of the technical assessment I have for hiring new platform engineers involves troubleshooting a service hosted in a headless Linux vm. Troubleshooting and fluency on the command line are among what I consider core skills. Being able to dig through abstraction layers is not just essential for when things go wrong, they are essential for building infrastructure, and really tells you whether an architecture is fit…
One of my favorite interview questions: "Here are some SSH credentials. What does this system do?"
Sometimes there aren't any docs. Sometimes the docs are wrong. It's important to be able to establish what the actual running situation is.
Re: Cockpit is a web-based graphical interface for servers
#48Earlier quoted context omitted.
Web UIs are nicer to deal with for simpler tasks. You can use this on your phone easily. Less technical users can be instructed on how to perform simple tasks like remotely powering off a machine.
Is the overhead of such tools, and added attack surface, justified over sshing and issuing a shutdown command though?
What kind of attack are you anticipating? Surely only a fool or a madman would make such a thing publicly accessible.
Re: Cockpit is a web-based graphical interface for servers
#49Would be nice if the landing page had some graphical pictures for a graphical interface...
Re: Cockpit is a web-based graphical interface for servers
#50the opinion you didn't ask for: avoid admin UIs... at best they make you lazy, at worst a security nightmare
If you want people to self-host, this is a gateway to that.
And those who are actually curious will look into what it's doing under the hood.
Everyone has to start somewhere.