diff --git a/.cockpit-appstream.metadata b/.cockpit-appstream.metadata
index 564d84f..80ee329 100644
--- a/.cockpit-appstream.metadata
+++ b/.cockpit-appstream.metadata
@@ -1,2 +1,2 @@
-974086b8d6091e65f0be7b160db33d2c0746f7d8 SOURCES/cockpit-246.tar.xz
-0bc66d2296dd908edf9c6a485e1f2c01b2a24f71 SOURCES/cockpit-machines-245.tar.gz
+9f554fc9f93250b05d8761af453bac98d67f6451 SOURCES/cockpit-248.tar.xz
+dc0e94d47cbd29497af9f4bbafb82b2e9155ba23 SOURCES/cockpit-machines-247.tar.gz
diff --git a/.gitignore b/.gitignore
index 3c50b56..f70b398 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-SOURCES/cockpit-246.tar.xz
-SOURCES/cockpit-machines-245.tar.gz
+SOURCES/cockpit-248.tar.xz
+SOURCES/cockpit-machines-247.tar.gz
diff --git a/SPECS/cockpit-appstream.spec b/SPECS/cockpit-appstream.spec
index 92d9011..7beebbf 100644
--- a/SPECS/cockpit-appstream.spec
+++ b/SPECS/cockpit-appstream.spec
@@ -1,5 +1,5 @@
 # This spec file has been automatically updated
-Version:        246
+Version:        248
 Release: 1%{?dist}
 #
 # Copyright (C) 2014-2020 Red Hat, Inc.
@@ -19,7 +19,7 @@ Release: 1%{?dist}
 #
 
 # This file is maintained at the following location:
-# https://github.com/cockpit-project/cockpit/blob/master/tools/cockpit.spec
+# https://github.com/cockpit-project/cockpit/blob/main/tools/cockpit.spec
 #
 # If you are editing this file in another location, changes will likely
 # be clobbered the next time an automated release is done.
@@ -35,7 +35,7 @@ Release: 1%{?dist}
 # by tools/gen-spec-dependencies during "make dist", but keep a hardcoded fallback
 %define required_base 122
 
-%define machines_version 245
+%define machines_version 247
 
 # we generally want CentOS packages to be like RHEL; special cases need to check %{centos} explicitly
 %if 0%{?centos}
@@ -479,7 +479,6 @@ authentication via sssd/FreeIPA.
 %doc %{_mandir}/man8/cockpit-ws.8.gz
 %doc %{_mandir}/man8/cockpit-tls.8.gz
 %doc %{_mandir}/man8/remotectl.8.gz
-%doc %{_mandir}/man8/pam_cockpit_cert.8.gz
 %doc %{_mandir}/man8/pam_ssh_add.8.gz
 %dir %{_sysconfdir}/cockpit
 %config(noreplace) %{_sysconfdir}/cockpit/ws-certs.d
@@ -554,6 +553,14 @@ fi
 # firewalld only partially picks up changes to its services files without this
 test -f %{_bindir}/firewall-cmd && firewall-cmd --reload --quiet || true
 
+# check for deprecated PAM config
+if grep --color=auto pam_cockpit_cert {_sysconfdir}/pam.d/cockpit; then
+    echo '**** WARNING:'
+    echo '**** WARNING: pam_cockpit_cert is a no-op and will be removed in a'
+    echo '**** WARNING: future release; remove it from your /etc/pam.d/cockpit.'
+    echo '**** WARNING:'
+fi
+
 %preun ws
 %systemd_preun cockpit.socket cockpit.service
 
@@ -713,7 +720,7 @@ If "virt-install" is installed, you can also create new virtual machines.
 %package -n cockpit-pcp
 Summary: Cockpit PCP integration
 Requires: cockpit-bridge >= 238.1.1
-Requires(post): pcp
+Requires: pcp
 
 %description -n cockpit-pcp
 Cockpit support for reading PCP metrics and loading PCP archives.
@@ -745,6 +752,10 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Thu Jul 09 2021 Katerina Koukiou <kkoukiou@redhat.com> - 248-1
+- Machines: Share host files with the guest using virtiofs
+- Machines: Show list of pass-through devices
+
 * Tue Jun 15 2021 Martin Pitt <mpitt@redhat.com> - 246-1
 - Polish of the Storage page
 - Storage: Show both SHA256 and SHA1 Tang fingerprints