cockpit-devel July 2017

cockpit-devel@lists.fedorahosted.org

7 participants
11 discussions

Some upcoming events to think about for Cockpit talks
by Josh Berkus 15 Sep '17

15 Sep '17

Cockpit Devs: As we talked about earlier, we need to expose more Linux users to Cockpit. As such, I wanted to let you know about a few upcoming conferences which are heavily patronized by Linux admins and would be a good place to start: Usenix LISA https://www.usenix.org/conference/lisa17 Deadline Monday, April 24, 2017, 11:59 pm PDT Open Source Summit (was LinuxCon) http://events.linuxfoundation.org/events/open-source-summit-north-america Deadline May 6, 2017 Open Source Summit Prague http://events.linuxfoundation.org/events/open-source-summit-europe Deadline July 8, 2017 ... there will be others as the calendar progresses (as well as Meetups). If anyone is interested in presenting to external audiences about Cockpit, please let me know ... I can help with reviewing conference submissions, travel funding and more. -- -- Josh Berkus Project Atomic Red Hat OSAS

3 4

Workshop in Berlin
by Lars Karlitski 02 Aug '17

02 Aug '17

Hi! We're organizing a Cockpit workshop in the two days preceding All Systems Go! conference [1] in Berlin — on the 19th and 20th of October. The idea is to bring the Cockpit community together to help each other out in various areas relating to Cockpit. For example, getting started writing a module, tackling beginner tasks, or understanding Cockpit's general architecture. If you're interested, please let us know (either on this list or to me directly) that you're planning on coming and which topics you'd like to learn or teach about. This will help us to plan accordingly. Also, spread the word if you like the idea! Cheers Lars [1] All Systems Go! is the more broad successor to last year's systemd.conf: https://all-systems-go.io/

3 2

Cockpit 147 released
by Martin Pitt 28 Jul '17

28 Jul '17

http://cockpit-project.org/blog/cockpit-147.html Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 147. Add configuration of expiry to Accounts page -------------------------------------------- The Accounts page can now display and change the expiration of user accounts and their passwords. Note that the login page supports changing expired passwords. Video: https://www.youtube.com/watch?v=q4JCoDF7XwY Thanks to Fridolin Pokorny for this improvement! Change: https://github.com/cockpit-project/cockpit/pull/2062 Consistently ignore loopback traffic on all network load graphs --------------------------------------------------------------- The network load graphics on the System, Networking, and Dashboard pages sometimes accounted traffic on the loopback network device (`lo`), which in most cases is not interesting for administrators. Now the graphs always ignore the loopback device. Change: https://github.com/cockpit-project/cockpit/pull/7363 Fix the Kdump page in Internet Exporer -------------------------------------- This page previously produced errors when being opened in Internet Explorer due to using unsupported JavaScript functions. These got replaced. Change: https://github.com/cockpit-project/cockpit/pull/7374 Get it ------ You can get Cockpit here: http://cockpit-project.org/running.html Cockpit 147 is available in Fedora 26: https://bodhi.fedoraproject.org/updates/cockpit-147-1.fc26 Or download the tarball here: https://github.com/cockpit-project/cockpit/releases/tag/147 Take care, Martin Pitt

1 0

No 'unsafe' Content-Security-Policy in Cockpit
by Stef Walter 27 Jul '17

27 Jul '17

The use of 'unsafe-inline' or 'unsafe-eval' or '*' in the Content-Security-Policy lines of manifest.json files is the equivalent of 'setenforce 0'. http://cockpit-project.org/guide/latest/packages.html#package-manifest It's not okay to disable this security measure for code included in the Cockpit codebase. This security measure prevents XSS, code-injection and other security attacks. https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP To bring this closer to home, the following aren't allowed: * onclick='...' attributes -> Attach event handlers from javascript instead. * <script> ... </script> inline scripts -> Include a script file rather than inline scripts * <style> ... </style> inline CSS -> Include this in your CSS file rather than inline * style='...' attributes -> Use your CSS file or javascript to set dynamic styles * eval() or Function() -> Never evaluate javascript directly By default Cockpit will refuse to allow them in loaded pages or javascript ... and we shouldn't use 'unsafe-inline' or 'unsafe-eval' in the manifest.json file to bypass this. I've added some testing so that such code in the Cockpit repository will be detected. https://github.com/cockpit-project/cockpit/pull/7391 Happy hacking, Stef

1 0

Cockpit 146 released
by Martin Pitt 27 Jul '17

27 Jul '17

http://cockpit-project.org/blog/cockpit-146.html (Sorry, forgot to send that email last Friday when we actually released) Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 146. Software Updates page shows more information -------------------------------------------- The Available Updates and Restart recommended pages now show the packages from the previous update run. This makes it easier to see which services to check or to decide whether a restart is really necessary. The new Update Log expander shows the previous steps of the running update. Screenshots: http://cockpit-project.org/blog/images/updates-history.png http://cockpit-project.org/blog/images/updates-live-log.png Changes: https://github.com/cockpit-project/cockpit/pull/7169 https://github.com/cockpit-project/cockpit/pull/7265 Improve available Software Updates layout for small/mobile screens ------------------------------------------------------------------ The Available Updates page now folds all information into a single column on very narrow/mobile screens, to stay readable. In addition, updates with a long changelog or a large number of subpackages now get truncated, with a `More information…` expander. This avoids lots of empty space that makes it difficult browse the updates list. Screenshot: http://cockpit-project.org/blog/images/updates-narrow.png Change: https://github.com/cockpit-project/cockpit/pull/7264 Support OAuth Kubernetes logins with Google Compute Engine ---------------------------------------------------------- The Kubernetes pages (Cluster) can now log into Google Compute Engine. Note that there is no way to get information about the user, so they are being displayed as `Unknown`. Changes: https://github.com/cockpit-project/cockpit/pull/7348 https://github.com/cockpit-project/cockpit/pull/7321 Fix reporting ABRT crashes that are already known to the server --------------------------------------------------------------- Trying to report a crash (`Problems` category on the Logs page) that the FAF server already knows previously caused an error message. This has been corrected, and the report is now properly shown as `Reported`. Thanks to Matej Marušák for this fix! Change: https://github.com/cockpit-project/cockpit/pull/7244 Scroll the virtual machine VNC console into view automatically -------------------------------------------------------------- When opening the builtin VNC console of a virtual machine, the page now automatically gets scrolled to maximize visibility of the console. Thanks to Marek Libra for this improvement! Change: https://github.com/cockpit-project/cockpit/pull/6950 Get it ------ You can get Cockpit here: http://cockpit-project.org/running.html Cockpit 146 is available in Fedora 26: https://bodhi.fedoraproject.org/updates/cockpit-146-1.fc26 Or download the tarball here: https://github.com/cockpit-project/cockpit/releases/tag/146 Take care, Martin Pitt

1 0

Experiment: casync for test image downloads/uploads
by Martin Pitt 18 Jul '17

18 Jul '17

Hello all, TL;DR: casync is an interesting piece of technology, but doesn't work for our current test images. As I just merged another fedora-26 test image refresh, I took some time to evaluate casync [1]. On my laptop I still have the old image (c75882fd), and on my colo server (which has a really fast internet connection) I downloaded the new image (554546f5). The main tradeoff is the chunk size: smaller sizes increase the likelihood of a particular chunk already being present locally, but increase the number chunks that need to be downloaded. As this usually happens through HTTP, lots of small files kill performance completely (mostly due to the usual TCP slow start behaviour, but also due to the extra effort of making the connection itself). The reference time on my VDSL-25: $ time bots/image-download fedora-26 real 9m52.313s This is still bearable, but it would be even more interesting to improve image uploads (they take about 45 mins here). First I created a casync index from the fedora 26 qcow image on my server, with the the default option (64 kB chunk size): server$ cd /path/to/testdir server$ casync make fedora-26.caibx images/fedora-26-*.qcow2 Now on my laptop I use casync to get the new image, using as many chunks from the previous one as a basis, plus the new chunks from my server: $ casync extract --seed images/fedora-26-c75882*.qcow2 http://piware.de/tmp/cockpit-images-casync/fedora-26.caibx images/fedora-26-554546f5c12141c3bc2e92ba53564ad490f6974aea5f7df831ebcab563bf1b62.qcow2 This has to download thousands of chunks, each using one HTTP request: It took slightly over 22 minutes. Oddly enough this didn't save the downloaded chunks anywhere, so I'm unable to tell whether this actually saved any bandwidth. Next I changed the average chunk size to 8 MB, and produced a new chunk store: server$ casync --store 8m.castr --chunk-size=8M make fedora-26-8mb.caibx images/fedora-26-*.qcow2 Trying to download it fails: $ casync -vv --store http://piware.de/tmp/cockpit-images-casync/8m.castr --seed images/fedora-26-c75882fdee8847229eb89707d41b4488286605fc9f150811a5d950b8a1399825.qcow2 extract http://piware.de/tmp/cockpit-images-casync/fedora-26-8mb.caibx images/fedora-26-554546f5c12141c3bc2e92ba53564ad490f6974aea5f7df831ebcab563bf1b62.qcow2 [...] Chunk too large Failed to acquire http://piware.de/tmp/cockpit-images-casync/8m.castr/6265/626515b391d445efc7… Failed to run synchronizer: Broken pipe OK, fair enough. Next attempt with 1MB worked, but took pretty much exactly the same time as bots/image-download. Apparently there wasn't any actual saving, the qcow images seem to differ too much in between image rebuilds. Cross-checking with rsync over ssh (against the old image): | 1,515,291,648 100% 2.68MB/s 0:09:00 (xfr#1, to-chk=0/1) | | sent 282,439 bytes received 1,479,233,072 bytes 2,712,219.09 bytes/sec | total size is 1,515,291,648 speedup is 1.02 Maybe there is some trick ("sort" the blocks on the file system or so) to make qcow files rsyncable better. But in conclusion, right now this delta approach doesn't buy us much. Martin [1] http://0pointer.net/blog/casync-a-tool-for-distributing-file-system-images.…

2 1

Cockpit UX enhancements for Grafton.
by Devyani Kota 18 Jul '17

18 Jul '17

Hello all, This is Devyani Kota, part of the RHGS team at RedHat, currently contributing to the Gluster storage plugin for cockpit-ovirt. We have created a few mockups for the same, that are attached along with the mail. We plan to add the 'Gluster' info under the Storage Tab listed on the overview page. Under this "Gluster" Tab, we will be listing: 1. The information of the hosts in the cluster, labelling the host machine which is the hosted-engine. 2. The volumes on every host, and their respective info like, the device that they are mounted on, the size of the disk that they occupy, etc. The mockups listed give a clear picture of the concept, and a simple overview on what we are trying to achieve. Any reviews/suggestions on the same will be appreciated :) Looking forward to the feedback. Thanks and regards, Devyani Kota. -- Devyani Kota [image: https://]about.me/devyanikota <https://about.me/devyanikota?promo=email_sig>

3 3

Session Recording page in Cockpit - POC demo
by Nikolai Kondrashov 12 Jul '17

12 Jul '17

Hi everyone, Over the last couple of weeks I've been learning about Cockpit internals, and hacked together a little proof-of-concept page listing and playing back user sessions recorded with tlog [1]. Here is a little demo of it I recorded: https://youtu.be/BPiqFKvW0q4 And here's the code: https://github.com/Scribery/cockpit/tree/hacking/pkg/session_recording The POC has absolutely minimal functionality and is not pretty, but it proves we can record sessions to systemd journal, and list them and play them back. Tlog-rec-session (a part of tlog) logs a recording as a series of messages, with several extra journal fields attached to allow for filtering all or specific recorded sessions from the rest of the journal log. Cockpit goes through journal extracting all tlog messages to collate a session list. When asked to playback a session, it starts tlog-play (another part of tlog) on the host, specifying how to extract session messages, connects it to a terminal emulator in the browser, and lets it play. Next, me and Kyrill are going to work on verifying we can implement the rest of the required core functionality [2] with this approach, learn more about Cockpit, and prepare a design as required by Cockpit team [3]. We will also see if we can make this into an out-of-tree package for Cockpit. We would appreciate any comments you might have, be it on the architecture, the code, or the way you think it should look! Thank you. Nick [1] Tlog - Terminal I/O logger https://github.com/Scribery/tlog [2] User Stories for Session Recording Playback https://github.com/Scribery/meta/blob/master/playback_ui_user_stories.md [3] Hacking on Cockpit - Contributing a Change https://github.com/cockpit-project/cockpit/blob/master/HACKING.md#contribut…

2 1

Cockpit 145 released
by Martin Pitt 07 Jul '17

07 Jul '17

http://cockpit-project.org/blog/cockpit-145.html Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 144 and 145. Terminal size ------------- The Terminal now uses the full window size and dynamically resizes with it. Previously its size was fixed to 80x24 characters. Screenshot: http://cockpit-project.org/blog/images/terminal-full-window.png Change: https://github.com/cockpit-project/cockpit/pull/4633 Machines page reactiveness -------------------------- The Machines page now listens to libvirt events instead of reading the entire state of all virtual machines every ten seconds. This makes the page much more reactive to state changes and reduces the number of calls to `virsh`. Change: https://github.com/cockpit-project/cockpit/pull/7141 Delete VM functionality ----------------------- A "Delete" button/dialog was added to the Machines page. If the VM is still running, it will be force-stopped first. The dialog also offers you the choice to remove the VM's disk images as well. Screenshot: http://cockpit-project.org/blog/images/machines-delete.png Change: https://github.com/cockpit-project/cockpit/pull/7113 Retire external Machines provider API ------------------------------------- Cockpit 132 introduced an external API for the Machines page that allowed third party plugins to dynamically add/manage virtual machines from providers other than libvirt. This was found to be not supportable in the long run and thus was discontinued. Change: https://github.com/cockpit-project/cockpit/pull/7128 ABRT integration ---------------- On Fedora 26 the Logs Page now shows Problem reports from the ABRT crash reporting tool. They appear as new message class "Problem" in the journal view, and their details can be visited when clicking on them. Thanks to Matej Marusak for this feature! Screenshots: http://cockpit-project.org/blog/images/logs-abrt-list.png http://cockpit-project.org/blog/images/logs-abrt-details.png Change: https://github.com/cockpit-project/cockpit/pull/6189 Always recommend restarting after applying Software Updates ----------------------------------------------------------- Most supported operating systems in Cockpit don't provide a reliable detection of whether they require restarting the machine after applying updates for them to fully take effect. This particularly affects updates to the kernel, but also restarting services. For now, Cockpit will always recommend to restart the machine after applying updates: Screenshot: http://cockpit-project.org/blog/images/updates-restart.png Change: https://github.com/cockpit-project/cockpit/pull/7101 Cancelling Software Updates --------------------------- The Software Updates page now has a Cancel button that is enabled while it is still safe to abort a running update, i.e. while the updates are still being downloaded. Change: https://github.com/cockpit-project/cockpit/pull/7026 Get it ------ You can get Cockpit here: http://cockpit-project.org/running.html Cockpit 145 is available in Fedora 26: https://bodhi.fedoraproject.org/updates/cockpit-145-1.fc26 Or download the tarball here: https://github.com/cockpit-project/cockpit/releases/tag/145 Take care, Martin Pitt

1 0

Cockpit 145 released
by Martin Pitt 07 Jul '17

07 Jul '17

http://cockpit-project.org/blog/cockpit-142.html Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 144 and 145. Terminal size ------------- The Terminal now uses the full window size and dynamically resizes with it. Previously its size was fixed to 80x24 characters. Screenshot: http://cockpit-project.org/blog/images/terminal-full-window.png Change: https://github.com/cockpit-project/cockpit/pull/4633 Machines page reactiveness -------------------------- The Machines page now listens to libvirt events instead of reading the entire state of all virtual machines every ten seconds. This makes the page much more reactive to state changes and reduces the number of calls to `virsh`. Change: https://github.com/cockpit-project/cockpit/pull/7141 Delete VM functionality ----------------------- A "Delete" button/dialog was added to the Machines page. If the VM is still running, it will be force-stopped first. The dialog also offers you the choice to remove the VM's disk images as well. Screenshot: http://cockpit-project.org/blog/images/machines-delete.png Change: https://github.com/cockpit-project/cockpit/pull/7113 Retire external Machines provider API ------------------------------------- Cockpit 132 introduced an external API for the Machines page that allowed third party plugins to dynamically add/manage virtual machines from providers other than libvirt. This was found to be not supportable in the long run and thus was discontinued. Change: https://github.com/cockpit-project/cockpit/pull/7128 ABRT integration ---------------- On Fedora 26 the Logs Page now shows Problem reports from the ABRT crash reporting tool. They appear as new message class "Problem" in the journal view, and their details can be visited when clicking on them. Thanks to Matej Marusak for this feature! Screenshots: http://cockpit-project.org/blog/images/logs-abrt-list.png http://cockpit-project.org/blog/images/logs-abrt-details.png Change: https://github.com/cockpit-project/cockpit/pull/6189 Always recommend restarting after applying Software Updates ----------------------------------------------------------- Most supported operating systems in Cockpit don't provide a reliable detection of whether they require restarting the machine after applying updates for them to fully take effect. This particularly affects updates to the kernel, but also restarting services. For now, Cockpit will always recommend to restart the machine after applying updates: Screenshot: http://cockpit-project.org/blog/images/updates-restart.png Change: https://github.com/cockpit-project/cockpit/pull/7101 Cancelling Software Updates --------------------------- The Software Updates page now has a Cancel button that is enabled while it is still safe to abort a running update, i.e. while the updates are still being downloaded. Change: https://github.com/cockpit-project/cockpit/pull/7026 Get it ------ You can get Cockpit here: http://cockpit-project.org/running.html Cockpit 145 is available in Fedora 26: https://bodhi.fedoraproject.org/updates/cockpit-145-1.fc26 Or download the tarball here: https://github.com/cockpit-project/cockpit/releases/tag/145 Take care, Martin Pitt

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

cockpit-devel July 2017