# # Copyright (C) 2014-2020 Red Hat, Inc. # # Cockpit is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or # (at your option) any later version. # # Cockpit is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # Lesser General Public License for more details. # # You should have received a copy of the GNU Lesser General Public License # along with Cockpit; If not, see . # # This file is maintained at the following location: # https://github.com/cockpit-project/cockpit/blob/main/tools/cockpit.spec # # If you are editing this file in another location, changes will likely # be clobbered the next time an automated release is done. # # Check first cockpit-devel@lists.fedorahosted.org # # earliest base that the subpackages work on; this is still required as long as # we maintain the basic/optional split, then it can be replaced with just %{version}. %define required_base 266 # we generally want CentOS packages to be like RHEL; special cases need to check %{centos} explicitly %if 0%{?centos} %define rhel %{centos} %endif %define _hardened_build 1 %define __lib lib %if %{defined _pamdir} %define pamdir %{_pamdir} %else %define pamdir %{_libdir}/security %endif Name: cockpit Summary: Web Console for Linux servers License: LGPL-2.1-or-later URL: https://cockpit-project.org/ Version: 286.1 Release: 1%{?dist} Source0: https://github.com/cockpit-project/cockpit/releases/download/%{version}/cockpit-%{version}.tar.xz Source1: cockpit.css.gz # in RHEL 8 the source package is duplicated: cockpit (building basic packages like cockpit-{bridge,system}) # and cockpit-appstream (building optional packages like cockpit-{pcp}) # This split does not apply to EPEL/COPR nor packit c8s builds, only to our own # image-prepare rhel-8-Y builds (which will disable build_all). # In Fedora ELN/RHEL 9+ there is just one source package, which ships rpms in both BaseOS and AppStream %if 0%{?rhel} == 8 && 0%{?epel} == 0 && !0%{?build_all} %if "%{name}" == "cockpit" %define build_basic 1 %define build_optional 0 %else %define build_basic 0 %define build_optional 1 %endif %else %define build_basic 1 %define build_optional 1 %endif # Allow root login in Cockpit on RHEL 8 and lower as it also allows password login over SSH. %if 0%{?rhel} && 0%{?rhel} <= 8 %define disallow_root 0 %else %define disallow_root 1 %endif # Ship custom SELinux policy (but not for cockpit-appstream) %if "%{name}" == "cockpit" %define selinuxtype targeted %define selinux_configure_arg --enable-selinux-policy=%{selinuxtype} %endif BuildRequires: gcc BuildRequires: pkgconfig(gio-unix-2.0) BuildRequires: pkgconfig(json-glib-1.0) BuildRequires: pkgconfig(polkit-agent-1) >= 0.105 BuildRequires: pam-devel BuildRequires: autoconf automake BuildRequires: make BuildRequires: /usr/bin/python3 %if 0%{?rhel} && 0%{?rhel} <= 8 # RHEL 8's gettext does not yet have metainfo.its BuildRequires: gettext >= 0.19.7 BuildRequires: libappstream-glib-devel %else BuildRequires: gettext >= 0.21 %endif %if 0%{?build_basic} BuildRequires: libssh-devel >= 0.8.5 %endif BuildRequires: openssl-devel BuildRequires: gnutls-devel >= 3.4.3 BuildRequires: zlib-devel BuildRequires: krb5-devel >= 1.11 BuildRequires: libxslt-devel BuildRequires: glib-networking BuildRequires: sed BuildRequires: glib2-devel >= 2.50.0 # this is for runtimedir in the tls proxy ace21c8879 BuildRequires: systemd-devel >= 235 %if 0%{?suse_version} BuildRequires: distribution-release BuildRequires: libpcp-devel BuildRequires: pcp-devel BuildRequires: libpcp3 BuildRequires: libpcp_import1 BuildRequires: openssh BuildRequires: distribution-logos BuildRequires: wallpaper-branding %else BuildRequires: pcp-libs-devel BuildRequires: openssh-clients BuildRequires: docbook-style-xsl %endif BuildRequires: krb5-server BuildRequires: gdb # For documentation BuildRequires: xmlto BuildRequires: selinux-policy BuildRequires: selinux-policy-devel # This is the "cockpit" metapackage. It should only # Require, Suggest or Recommend other cockpit-xxx subpackages Requires: cockpit-bridge Requires: cockpit-ws Requires: cockpit-system # Optional components Recommends: (cockpit-storaged if udisks2) Recommends: (cockpit-packagekit if dnf) Suggests: cockpit-pcp %if 0%{?rhel} == 0 Recommends: (cockpit-networkmanager if NetworkManager) # c-ostree is not in RHEL 8/9 Recommends: (cockpit-ostree if rpm-ostree) Suggests: cockpit-selinux %endif %if 0%{?rhel} && 0%{?centos} == 0 Requires: subscription-manager-cockpit %endif %prep %setup -q -n cockpit-%{version} %build %configure \ %{?selinux_configure_arg} \ --with-cockpit-user=cockpit-ws \ --with-cockpit-ws-instance-user=cockpit-wsinstance \ %if 0%{?suse_version} --docdir=%_defaultdocdir/%{name} \ %endif --with-pamdir='%{pamdir}' \ %if 0%{?build_basic} == 0 --disable-ssh \ %endif %make_build %check make -j$(nproc) check %install %make_install make install-tests DESTDIR=%{buildroot} mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pam.d install -p -m 644 tools/cockpit.pam $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/cockpit rm -f %{buildroot}/%{_libdir}/cockpit/*.so install -D -p -m 644 AUTHORS COPYING README.md %{buildroot}%{_docdir}/cockpit/ # RHEL 8 specific backwards compat API install -m 644 %{SOURCE1} %{buildroot}%{_datadir}/cockpit/base1/ ln -s cockpit.css.gz %{buildroot}%{_datadir}/cockpit/base1/patternfly.css.gz # Build the package lists for resource packages # cockpit-bridge is the basic dependency for all cockpit-* packages, so centrally own the page directory echo '%dir %{_datadir}/cockpit' > base.list echo '%dir %{_datadir}/cockpit/base1' >> base.list find %{buildroot}%{_datadir}/cockpit/base1 -type f -o -type l >> base.list echo '%{_sysconfdir}/cockpit/machines.d' >> base.list echo %{buildroot}%{_datadir}/polkit-1/actions/org.cockpit-project.cockpit-bridge.policy >> base.list echo '%dir %{_datadir}/cockpit/ssh' >> base.list find %{buildroot}%{_datadir}/cockpit/ssh -type f >> base.list echo '%{_libexecdir}/cockpit-ssh' >> base.list echo '%dir %{_datadir}/cockpit/pcp' > pcp.list find %{buildroot}%{_datadir}/cockpit/pcp -type f >> pcp.list echo '%dir %{_datadir}/cockpit/tuned' > system.list find %{buildroot}%{_datadir}/cockpit/tuned -type f >> system.list echo '%dir %{_datadir}/cockpit/shell' >> system.list find %{buildroot}%{_datadir}/cockpit/shell -type f >> system.list echo '%dir %{_datadir}/cockpit/systemd' >> system.list find %{buildroot}%{_datadir}/cockpit/systemd -type f >> system.list echo '%dir %{_datadir}/cockpit/users' >> system.list find %{buildroot}%{_datadir}/cockpit/users -type f >> system.list echo '%dir %{_datadir}/cockpit/metrics' >> system.list find %{buildroot}%{_datadir}/cockpit/metrics -type f >> system.list echo '%dir %{_datadir}/cockpit/kdump' > kdump.list find %{buildroot}%{_datadir}/cockpit/kdump -type f >> kdump.list echo '%dir %{_datadir}/cockpit/sosreport' > sosreport.list find %{buildroot}%{_datadir}/cockpit/sosreport -type f >> sosreport.list echo '%dir %{_datadir}/cockpit/storaged' > storaged.list find %{buildroot}%{_datadir}/cockpit/storaged -type f >> storaged.list echo '%dir %{_datadir}/cockpit/networkmanager' > networkmanager.list find %{buildroot}%{_datadir}/cockpit/networkmanager -type f >> networkmanager.list echo '%dir %{_datadir}/cockpit/packagekit' > packagekit.list find %{buildroot}%{_datadir}/cockpit/packagekit -type f >> packagekit.list echo '%dir %{_datadir}/cockpit/apps' >> packagekit.list find %{buildroot}%{_datadir}/cockpit/apps -type f >> packagekit.list echo '%dir %{_datadir}/cockpit/selinux' > selinux.list find %{buildroot}%{_datadir}/cockpit/selinux -type f >> selinux.list echo '%dir %{_datadir}/cockpit/playground' > tests.list find %{buildroot}%{_datadir}/cockpit/playground -type f >> tests.list echo '%dir %{_datadir}/cockpit/static' > static.list echo '%dir %{_datadir}/cockpit/static/fonts' >> static.list find %{buildroot}%{_datadir}/cockpit/static -type f >> static.list # when not building basic packages, remove their files %if 0%{?build_basic} == 0 for pkg in base1 branding motd kdump networkmanager selinux shell sosreport ssh static systemd tuned users metrics; do rm -r %{buildroot}/%{_datadir}/cockpit/$pkg rm -f %{buildroot}/%{_datadir}/metainfo/org.cockpit-project.cockpit-${pkg}.metainfo.xml done for data in doc man pixmaps polkit-1; do rm -r %{buildroot}/%{_datadir}/$data done rm -r %{buildroot}/%{_prefix}/%{__lib}/tmpfiles.d find %{buildroot}/%{_unitdir}/ -type f ! -name 'cockpit-session*' -delete for libexec in cockpit-askpass cockpit-session cockpit-ws cockpit-tls cockpit-wsinstance-factory cockpit-client cockpit-client.ui cockpit-desktop cockpit-certificate-helper cockpit-certificate-ensure; do rm %{buildroot}/%{_libexecdir}/$libexec done rm -r %{buildroot}/%{_sysconfdir}/pam.d %{buildroot}/%{_sysconfdir}/motd.d %{buildroot}/%{_sysconfdir}/issue.d rm -f %{buildroot}/%{_libdir}/security/pam_* rm %{buildroot}/usr/bin/cockpit-bridge rm -f %{buildroot}%{_libexecdir}/cockpit-ssh rm -f %{buildroot}%{_datadir}/metainfo/cockpit.appdata.xml %endif # when not building optional packages, remove their files %if 0%{?build_optional} == 0 for pkg in apps packagekit pcp playground storaged; do rm -rf %{buildroot}/%{_datadir}/cockpit/$pkg done # files from -tests rm -f %{buildroot}/%{pamdir}/mock-pam-conv-mod.so rm -f %{buildroot}/%{_unitdir}/cockpit-session.socket rm -f %{buildroot}/%{_unitdir}/cockpit-session@.service # files from -pcp rm -r %{buildroot}/%{_libexecdir}/cockpit-pcp %{buildroot}/%{_localstatedir}/lib/pcp/ # files from -storaged rm -f %{buildroot}/%{_prefix}/share/metainfo/org.cockpit-project.cockpit-storaged.metainfo.xml %endif sed -i "s|%{buildroot}||" *.list %if ! 0%{?suse_version} %global _debugsource_packages 1 %global _debuginfo_subpackages 0 %define find_debug_info %{_rpmconfigdir}/find-debuginfo.sh %{?_missing_build_ids_terminate_build:--strict-build-id} %{?_include_minidebuginfo:-m} %{?_find_debuginfo_dwz_opts} %{?_find_debuginfo_opts} %{?_debugsource_packages:-S debugsourcefiles.list} "%{_builddir}/%{?buildsubdir}" %endif # /suse_version rm -rf %{buildroot}/usr/src/debug # On RHEL kdump, networkmanager, selinux, and sosreport are part of the system package %if 0%{?rhel} cat kdump.list sosreport.list networkmanager.list selinux.list >> system.list rm -f %{buildroot}%{_datadir}/metainfo/org.cockpit-project.cockpit-sosreport.metainfo.xml rm -f %{buildroot}%{_datadir}/metainfo/org.cockpit-project.cockpit-kdump.metainfo.xml rm -f %{buildroot}%{_datadir}/metainfo/org.cockpit-project.cockpit-selinux.metainfo.xml rm -f %{buildroot}%{_datadir}/metainfo/org.cockpit-project.cockpit-networkmanager.metainfo.xml rm -f %{buildroot}%{_datadir}/pixmaps/cockpit-sosreport.png %endif # ------------------------------------------------------------------------------- # Basic Sub-packages %if 0%{?build_basic} %description The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. %files %{_docdir}/cockpit/AUTHORS %{_docdir}/cockpit/COPYING %{_docdir}/cockpit/README.md %{_datadir}/metainfo/cockpit.appdata.xml %{_datadir}/pixmaps/cockpit.png %doc %{_mandir}/man1/cockpit.1.gz %package bridge Summary: Cockpit bridge server-side component Requires: glib-networking Provides: cockpit-ssh = %{version}-%{release} # 233 dropped jquery.js, pages started to bundle it (commit 049e8b8dce) Conflicts: cockpit-dashboard < 233 Conflicts: cockpit-networkmanager < 233 Conflicts: cockpit-storaged < 233 Conflicts: cockpit-system < 233 Conflicts: cockpit-tests < 233 Conflicts: cockpit-docker < 233 %description bridge The Cockpit bridge component installed server side and runs commands on the system on behalf of the web based user interface. %files bridge -f base.list %doc %{_mandir}/man1/cockpit-bridge.1.gz %{_bindir}/cockpit-bridge %{_libexecdir}/cockpit-askpass %package doc Summary: Cockpit deployment and developer guide BuildArch: noarch %description doc The Cockpit Deployment and Developer Guide shows sysadmins how to deploy Cockpit on their machines as well as helps developers who want to embed or extend Cockpit. %files doc %exclude %{_docdir}/cockpit/AUTHORS %exclude %{_docdir}/cockpit/COPYING %exclude %{_docdir}/cockpit/README.md %{_docdir}/cockpit %package system Summary: Cockpit admin interface package for configuring and troubleshooting a system BuildArch: noarch Requires: cockpit-bridge >= %{version}-%{release} %if !0%{?suse_version} Requires: shadow-utils %endif Requires: grep Requires: /usr/bin/pwscore Requires: /usr/bin/date Provides: cockpit-shell = %{version}-%{release} Provides: cockpit-systemd = %{version}-%{release} Provides: cockpit-tuned = %{version}-%{release} Provides: cockpit-users = %{version}-%{release} Obsoletes: cockpit-dashboard < %{version}-%{release} %if 0%{?rhel} Requires: NetworkManager >= 1.6 Requires: kexec-tools Requires: sos Requires: sudo Recommends: PackageKit Recommends: setroubleshoot-server >= 3.3.3 Suggests: NetworkManager-team Provides: cockpit-kdump = %{version}-%{release} Provides: cockpit-networkmanager = %{version}-%{release} Provides: cockpit-selinux = %{version}-%{release} Provides: cockpit-sosreport = %{version}-%{release} %endif %if 0%{?fedora} Recommends: (reportd if abrt) %endif %description system This package contains the Cockpit shell and system configuration interfaces. %files system -f system.list %dir %{_datadir}/cockpit/shell/images %package ws Summary: Cockpit Web Service Requires: glib-networking Requires: openssl Requires: glib2 >= 2.50.0 Requires: (selinux-policy >= %{_selinux_policy_version} if selinux-policy-%{selinuxtype}) Requires(post): (policycoreutils if selinux-policy-%{selinuxtype}) Conflicts: firewalld < 0.6.0-1 Recommends: sscg >= 2.3 Recommends: system-logos Suggests: sssd-dbus # for cockpit-desktop Suggests: python3 # prevent hard python3 dependency for cockpit-desktop, it falls back to other browsers %global __requires_exclude_from ^%{_libexecdir}/cockpit-client$ %description ws The Cockpit Web Service listens on the network, and authenticates users. If sssd-dbus is installed, you can enable client certificate/smart card authentication via sssd/FreeIPA. %files ws -f static.list %doc %{_mandir}/man1/cockpit-desktop.1.gz %doc %{_mandir}/man5/cockpit.conf.5.gz %doc %{_mandir}/man8/cockpit-ws.8.gz %doc %{_mandir}/man8/cockpit-tls.8.gz %doc %{_mandir}/man8/pam_ssh_add.8.gz %dir %{_sysconfdir}/cockpit %config(noreplace) %{_sysconfdir}/cockpit/ws-certs.d %config(noreplace) %{_sysconfdir}/pam.d/cockpit # created in %post, so that users can rm the files %ghost %{_sysconfdir}/issue.d/cockpit.issue %ghost %{_sysconfdir}/motd.d/cockpit %ghost %attr(0644, root, root) %{_sysconfdir}/cockpit/disallowed-users %dir %{_datadir}/cockpit/motd %{_datadir}/cockpit/motd/update-motd %{_datadir}/cockpit/motd/inactive.motd %{_unitdir}/cockpit.service %{_unitdir}/cockpit-motd.service %{_unitdir}/cockpit.socket %{_unitdir}/cockpit-wsinstance-http.socket %{_unitdir}/cockpit-wsinstance-http.service %{_unitdir}/cockpit-wsinstance-https-factory.socket %{_unitdir}/cockpit-wsinstance-https-factory@.service %{_unitdir}/cockpit-wsinstance-https@.socket %{_unitdir}/cockpit-wsinstance-https@.service %{_unitdir}/system-cockpithttps.slice %{_prefix}/%{__lib}/tmpfiles.d/cockpit-tempfiles.conf %{pamdir}/pam_ssh_add.so %{pamdir}/pam_cockpit_cert.so %{_libexecdir}/cockpit-ws %{_libexecdir}/cockpit-wsinstance-factory %{_libexecdir}/cockpit-tls %{_libexecdir}/cockpit-client %{_libexecdir}/cockpit-client.ui %{_libexecdir}/cockpit-desktop %{_libexecdir}/cockpit-certificate-ensure %{_libexecdir}/cockpit-certificate-helper %attr(4750, root, cockpit-wsinstance) %{_libexecdir}/cockpit-session %{_datadir}/cockpit/branding %{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2 %{_mandir}/man8/%{name}_session_selinux.8cockpit.* %{_mandir}/man8/%{name}_ws_selinux.8cockpit.* %ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{name} %pre ws getent group cockpit-ws >/dev/null || groupadd -r cockpit-ws getent passwd cockpit-ws >/dev/null || useradd -r -g cockpit-ws -d /nonexisting -s /sbin/nologin -c "User for cockpit web service" cockpit-ws getent group cockpit-wsinstance >/dev/null || groupadd -r cockpit-wsinstance getent passwd cockpit-wsinstance >/dev/null || useradd -r -g cockpit-wsinstance -d /nonexisting -s /sbin/nologin -c "User for cockpit-ws instances" cockpit-wsinstance if %{_sbindir}/selinuxenabled 2>/dev/null; then %selinux_relabel_pre -s %{selinuxtype} fi %post ws if [ -x %{_sbindir}/selinuxenabled ]; then %selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2 %selinux_relabel_post -s %{selinuxtype} fi # set up dynamic motd/issue symlinks on first-time install; don't bring them back on upgrades if admin removed them # disable root login on first-time install; so existing installations aren't changed if [ "$1" = 1 ]; then mkdir -p /etc/motd.d /etc/issue.d ln -s ../../run/cockpit/motd /etc/motd.d/cockpit ln -s ../../run/cockpit/motd /etc/issue.d/cockpit.issue printf "# List of users which are not allowed to login to Cockpit\n" > /etc/cockpit/disallowed-users %if 0%{?disallow_root} printf "root\n" >> /etc/cockpit/disallowed-users %endif chmod 644 /etc/cockpit/disallowed-users fi %tmpfiles_create cockpit-tempfiles.conf %systemd_post cockpit.socket cockpit.service # firewalld only partially picks up changes to its services files without this test -f %{_bindir}/firewall-cmd && firewall-cmd --reload --quiet || true # check for deprecated PAM config if grep --color=auto pam_cockpit_cert %{_sysconfdir}/pam.d/cockpit; then echo '**** WARNING:' echo '**** WARNING: pam_cockpit_cert is a no-op and will be removed in a' echo '**** WARNING: future release; remove it from your /etc/pam.d/cockpit.' echo '**** WARNING:' fi %preun ws %systemd_preun cockpit.socket cockpit.service %postun ws if [ -x %{_sbindir}/selinuxenabled ]; then %selinux_modules_uninstall -s %{selinuxtype} %{name} %selinux_relabel_post -s %{selinuxtype} fi %systemd_postun_with_restart cockpit.socket cockpit.service # ------------------------------------------------------------------------------- # Sub-packages that are part of cockpit-system in RHEL/CentOS, but separate in Fedora %if 0%{?rhel} == 0 %package kdump Summary: Cockpit user interface for kernel crash dumping Requires: cockpit-bridge >= %{required_base} Requires: cockpit-shell >= %{required_base} Requires: kexec-tools BuildArch: noarch %description kdump The Cockpit component for configuring kernel crash dumping. %files kdump -f kdump.list %{_datadir}/metainfo/org.cockpit-project.cockpit-kdump.metainfo.xml %package sosreport Summary: Cockpit user interface for diagnostic reports Requires: cockpit-bridge >= %{required_base} Requires: cockpit-shell >= %{required_base} Requires: sos BuildArch: noarch %description sosreport The Cockpit component for creating diagnostic reports with the sosreport tool. %files sosreport -f sosreport.list %{_datadir}/metainfo/org.cockpit-project.cockpit-sosreport.metainfo.xml %{_datadir}/pixmaps/cockpit-sosreport.png %package networkmanager Summary: Cockpit user interface for networking, using NetworkManager Requires: cockpit-bridge >= %{required_base} Requires: cockpit-shell >= %{required_base} Requires: NetworkManager >= 1.6 # Optional components Recommends: NetworkManager-team BuildArch: noarch %description networkmanager The Cockpit component for managing networking. This package uses NetworkManager. %files networkmanager -f networkmanager.list %{_datadir}/metainfo/org.cockpit-project.cockpit-networkmanager.metainfo.xml %endif %if 0%{?rhel} == 0 %package selinux Summary: Cockpit SELinux package Requires: cockpit-bridge >= %{required_base} Requires: cockpit-shell >= %{required_base} Requires: setroubleshoot-server >= 3.3.3 BuildArch: noarch %description selinux This package contains the Cockpit user interface integration with the utility setroubleshoot to diagnose and resolve SELinux issues. %files selinux -f selinux.list %{_datadir}/metainfo/org.cockpit-project.cockpit-selinux.metainfo.xml %endif #/ build basic packages %else # RPM requires this %description Dummy package from building optional packages only; never install or publish me. #/ build basic packages %endif # ------------------------------------------------------------------------------- # Sub-packages that are optional extensions %if 0%{?build_optional} %package -n cockpit-storaged Summary: Cockpit user interface for storage, using udisks Requires: cockpit-shell >= %{required_base} Requires: udisks2 >= 2.9 Recommends: udisks2-lvm2 >= 2.9 Recommends: udisks2-iscsi >= 2.9 Recommends: device-mapper-multipath Recommends: clevis-luks Requires: %{__python3} %if 0%{?suse_version} Requires: python3-dbus-python %else Requires: python3-dbus %endif BuildArch: noarch %description -n cockpit-storaged The Cockpit component for managing storage. This package uses udisks. %files -n cockpit-storaged -f storaged.list %dir %{_datadir}/cockpit/storaged/images %{_datadir}/metainfo/org.cockpit-project.cockpit-storaged.metainfo.xml %package -n cockpit-tests Summary: Tests for Cockpit Requires: cockpit-bridge >= %{required_base} Requires: cockpit-system >= %{required_base} Requires: openssh-clients Provides: cockpit-test-assets = %{version}-%{release} %description -n cockpit-tests This package contains tests and files used while testing Cockpit. These files are not required for running Cockpit. %files -n cockpit-tests -f tests.list %{pamdir}/mock-pam-conv-mod.so %{_unitdir}/cockpit-session.socket %{_unitdir}/cockpit-session@.service %package -n cockpit-pcp Summary: Cockpit PCP integration Requires: cockpit-bridge >= %{required_base} Requires: pcp %description -n cockpit-pcp Cockpit support for reading PCP metrics and loading PCP archives. %files -n cockpit-pcp -f pcp.list %{_libexecdir}/cockpit-pcp %{_localstatedir}/lib/pcp/config/pmlogconf/tools/cockpit %post -n cockpit-pcp systemctl reload-or-try-restart pmlogger %package -n cockpit-packagekit Summary: Cockpit user interface for packages BuildArch: noarch Requires: cockpit-bridge >= %{required_base} Requires: PackageKit Recommends: python3-tracer # HACK: https://bugzilla.redhat.com/show_bug.cgi?id=1800468 Requires: polkit %description -n cockpit-packagekit The Cockpit components for installing OS updates and Cockpit add-ons, via PackageKit. %files -n cockpit-packagekit -f packagekit.list #/ build optional extension packages %endif # The changelog is automatically generated and merged %changelog * Thu Feb 23 2023 Martin Pitt - 286.1-1 - Users: Fix broken alignment of the first column in groups table - Translation updates (rhbz#2139715) * Wed Feb 22 2023 Martin Pitt - 286-1 - Metrics: control visibility of the resource usage graphs * Wed Feb 08 2023 Martin Pitt - 285-1 - Cryptographic subpolicies support - users: Group creation and filtering support * Wed Jan 25 2023 Martin Pitt - 284-1 - Services: Show logs for user units - Storage: Set up a system to use NBDE * Wed Jan 11 2023 Katerina Koukiou - 283-1 - Services: Create timer to run every minute * Wed Dec 14 2022 Katerina Koukiou - 282-1 - Add right-to-left language support - Accounts: Redesign and include groups - Dark theme switcher - tools: Disallow root login by default * Tue Nov 15 2022 Matej Marusak - 279-1 - Dark theme support - Metrics: Display individual disk read/write usage * Thu Aug 25 2022 Matej Marusak - 275-1 - shell: Support for alternatives to sudo (rhbz#2091034) * Thu Jul 21 2022 Martin Pitt - 273-2 - Re-disable BaseOS package builds * Thu Jul 21 2022 Martin Pitt - 273-1 - Metrics: Display CPU temperature - Networking: Suggest netmask and gateway addresses - Software Updates: Optionally reboot after updating - cockpit/ws container: Support modern SSH keys * Wed Jun 29 2022 Martin Pitt - 272-2 - No-change rebuild due to brew confusion * Thu Jun 23 2022 Matej Marusak - 272-1 - Firewall: Edit custom services - Services: Pin services as favorites - Login: Dark mode * Wed May 25 2022 Martin Pitt - 270-1 - Services: User-created timer deletion - System Diagnostics: Working with diagnostic reports has been improved * Mon May 16 2022 Matej Marusak - 269-1 - Kdump: Show journal when service fails (rhbz#2062297) - Parse /proc/cpuinfo on s390x (rhbz#2069552) - bridge: Default "init-superuser" to "none" (rhbz#2071938) - Animate new rows in lists - Crypto policies support - Metrics: Show busiest CPU core - Metrics: Show Podman containers in top CPU and memory lists - Standardize on SI-based units for data sizes and rates * Fri Feb 25 2022 Martin Pitt - 264-1 - Metrics: Improve layout on small resolutions - Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386) - Services: Show error message instead of eternal "Loading..." state - Accounts: Add override button to confirm weak password - Accounts: Fix parsing of "last login" date * Thu Feb 17 2022 Martin Pitt - 263-1 - Overview: Show scheduled shutdowns - Networking: Add firewall service description - Shell: Fix browser history * Tue Jan 25 2022 Matej Marusak - 261-1 - shell: Allow adding keys with passphrase * Tue Jan 04 2022 Martin Pitt - 260-1 - Certificate login validation (rhbz#1992620, CVE-2021-3698) - Client: Show previously used hosts - Client: Support port specification - bridge: Warning on missing cockpit-system package * Mon Dec 13 2021 Martin Pitt - 259-1 - Translation updates * Thu Nov 25 2021 Martin Pitt - 258-1 - Tweak login screen UI - Fix SELinux policy installation * Wed Nov 10 2021 Katerina Koukiou - 257-1 - Support for reading TLS certificates with any permissions - cockpit-ws no longer supports merged certificates - Services: Show user-owned systemd units (rhbz#1792270) * Thu Oct 14 2021 Martin Pitt - 255-1 - Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660) - kdump: Show "Directory" field for NFS mounts (rbhz#2004041) * Wed Aug 18 2021 Matej Marusak - 251-1 - Logs: Fix layout and add new filtering options (rhbz#1980207) * Wed Aug 04 2021 Martin Pitt - 250-1 - Shell: Improve admin switcher and session menu - Update Insights links to point to console.redhat.com (rhbz#1984841) * Wed Jul 21 2021 Matej Marusak - 249-1 - common: Add Content-Type for wasm - all: Port away from Moment.js * Thu Jul 08 2021 Martin Pitt - 248-1 - Metrics: Install missing packages - PAM: Deprecate pam_cockpit_cert module * Wed Jun 23 2021 Katerina Koukiou - 247-1 - Metrics: Enable Grafana client setup * Tue Jun 15 2021 Martin Pitt - 246-1 - Metrics: New PCP configuration dialog - Polish of the Services page - Updated translations * Wed May 12 2021 Katerina Koukiou - 244.1-1 - Shell: sudo is invoked only when explicitly requested - Dynamically manage motd/issue symlinks in package scripts (rhbz#1876848) * Mon Apr 19 2021 Matej Marusak - 242-1 - Network: Fix device connection button (rhbz#1946874) - Network: Fully show MAC dropdown in add bond dialog (rhbz#1946877) * Mon Feb 22 2021 Martin Pitt - 238.1-1 - Several UI alignment fixes - Re-drop unit tests from built packages - Metrics: Don't show swap column when no swap is present - Metrics: Don't show duplicate events * Wed Feb 17 2021 Martin Pitt - 238-1 - Web server: Preserve permissions of administrator-provided certificates - System: Performance page shows busiest CPU cores * Fri Feb 05 2021 Martin Pitt - 237-1 - SSH connections to remote machines are only opened when necessary * Fri Jan 22 2021 Matej Marusak - 236-1 - fslist channels: Include properties of changed files - Internal stabilization work * Fri Jan 08 2021 Martin Pitt - 235-1 - Login: Improved handling of SSH host keys - Overview: Editable motd - Adjust tests for sos 4.x to fix gating tests (rhbz#1895912) * Mon Dec 14 2020 Katerina Koukiou - 234-1 - Improved login page - Improved bridge code after feedback from recent coverity scanning * Fri Nov 27 2020 Katerina Koukiou - 233.1-1 - Non-admin users no longer see Cockpit in motd (rhbz#1872562) - Improved host editing - Replace system's graph page with a completely new USE method page - Logging of remote IP addresses - shell: Any page can be the shell - Accounts: Allow setting weak passwords (rhbz#1652390) - Terminal: Fix issue with prompt not returning when clicking reset button in disoconnected session (rhbz#1897430) * Wed Aug 19 2020 Matej Marusak - 224.2-1 - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995) - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821) * Wed Aug 05 2020 Matej Marusak - 224.1-1 - ws: Add key usage and constraints to self-signed server certificate (rhbz#1859812) * Thu Jul 23 2020 Martin Pitt - 224-1 - More translation updates (rhbz#1820538) - Some bug fixes on Services page * Thu Jul 09 2020 Martin Pitt - 223-1 - Webserver: Standard-conformant lifetime of web server Certificate - Support certificate authentication against Active Directory - Fix cockpit-desktop privileges (rhbz#1841104) - Translation updates (rhbz#1820538) * Fri Jun 26 2020 Martin Pitt - 222.1-1 - Some integration test fixes for dist-git gating * Wed Jun 24 2020 Matej Marusak - 222-1 - Logs: More flexible text filters - Services, Dashboard: Hide some buttons when access is limited - Webserver: Lock down cockpit.service privileges - Localization updates (rhbz#1820538) * Mon Jun 15 2020 Martin Pitt - 221.1-1 - Put back missing base1/patternfly.css - Services: Don't offer 'Start Service' in Limited Access mode * Sun Jun 14 2020 Martin Pitt - 221-1 - Support for Cross-Origin-Resource-Policy - Accounts: Some buttons are hidden when access is limited - Developers: Importing "base1/patternfly.css" is deprecated - Translation updates (rhbz#1820538) * Thu May 28 2020 Matej Marusak - 220-1 - New navigation with integrated switching of hosts - Logs: Inline help for filtering - Fix cockpit-system AppStream dependency (rhbz#1838003) * Wed May 13 2020 Matej Marusak - 219-1 - Rebase to upstream version 219 - Accept upper-case login names for ssh/polkit agent challenges (rhbz#1825749) - Show last/failed login (rhbz#1784772) - Modernize services page (rhbz#1791193) - Search in journal (rhbz#1710731) - The default mode is not consistent with the mode in the created bond (rhbz#1817948) - Fix deadlock in channel pressure handling (rhbz#1751783) * Thu Mar 12 2020 Martin Pitt - 211.3-1 - Fix CJK translations (rhbz#1807856) * Mon Feb 24 2020 Martin Pitt - 211.2-2 - Fix weak dependencies of cockpit/cockpit-system rhbz#1803858 * Wed Feb 19 2020 Matej Marusak - 211.2-1 - Users: Fix reboot warnings of changed roles - Translation updates (rhbz#1754958) - Fix CPU mitigations to recognize kernel options at the beginning of line * Sun Jan 26 2020 Martin Pitt - 211.1-1 - system: Fix graph layout across all browsers (rhbz#1792623) - websocket: Fix unaligned access in send_prefixed_message_rfc6455() * Thu Jan 23 2020 Martin Pitt - 211-1 - Fix HTTPS requests > 4 KiB (rhbz#1785509) - Better support for various TLS certificate formats - Switch from Zanata to Weblate - Overview layout optimizations - Translation updates (rhbz#1754958) * Thu Jan 09 2020 Martin Pitt - 210-1 - Overview: Add CPU utilization to usage card - Dashboard: Support SSH identity unlocking when adding new machines - SElinux: Introduce an Ansible automation script - Translation updates (partially fixes rhbz#1754958) * Mon Dec 16 2019 Matej Marusak - 209-2 - Remove SELinux policy hack from spec file * Fri Dec 13 2019 Matej Marusak - 209-1 - New overview design - Session timeouts - Banners on login screen - Client certificate authentication - Dropped support for pam_rhost * Thu Nov 28 2019 Matej Marusak - 208-1 - Fix SELinux policy update hack in %post * Thu Nov 14 2019 Matej Marusak - 207-1 - Web server: Accept EC certificates - Redesigned notifications * Wed Nov 13 2019 Martin Pitt - 206-1 - Sync with Fedora 31, to get cockpit-tls prerequisite for upcoming Smart card support - Logging in with SELinux-restricted user role now works (rhbz#1727382) * Fri Sep 13 2019 Martin Pitt - 196.3-1 - systemd: Warn if not connected to Insights (rhbz#1745964) * Tue Aug 13 2019 Martin Pitt - 196.2-1 - firewall: Show any included services on a service (rhbz#1721548) * Thu Aug 01 2019 Martin Pitt - 196.1-1 - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575) - networkmanager: Ensure that endianess is always set (rhbz#1728213) - Update translations (rhbz#1689977) * Thu Jun 13 2019 Martin Pitt - 196-1 - Networking: Add Firewall Zones configuration rhbz#1678473 - Fix ssh login to unknown hosts rhbz#1701174 - Fix login when ~/.bashrc prints to stdout rhbz#1716223 - Much better On/Off buttons, also avoid text overlap rhbz#1677593 * Sun May 05 2019 Martin Pitt - 193-1 - Allow accounts with non-standard shells rhbz#1631905 - Translation cleanup rhbz#1666722 * Thu Apr 04 2019 Martin Pitt - 191-1 - System: Enable/disable SMT rhbz#1678956 - Logs: Add service filtering rhbz#1657756 - Networking: Add custom firewall ports rhbz#1660400 * Wed Mar 13 2019 Martin Pitt - 189-1 - Add search box to Services page rhbz#1657752 - Connect to firewalld as superuser rhbz#1664158 - Fix log filtering rhbz#1665421 - Show error message for invalid IdM domain names rhbz#1659333 - Changing passwords as root does not ask for current password rhbz#1666005 * Fri Feb 08 2019 Martin Pitt - 185-2 - Fix polkit policy file translation attributes rhbz#1671773 * Wed Jan 09 2019 Martin Pitt - 185-1 - Update translations rhbz#1608292 - Responsive dialogs on network, kdump and users page * Fri Dec 14 2018 Martin Pitt - 184-1 - Integration of Cockpit pages on the desktop rhbz#1651264 - Fix crash in Simplified Chinese locale rhbz#1653544 - Update screenshots in AppStream data rhbz#1656982 - Update translations from Zanata rhbz#1608292 - Improve login error message if cockpit-system is not installed rhbz#1650467 - Mark deleted cookie as HttpOnly to pacify security scanners rhbz#1656441 * Wed Nov 28 2018 Martin Pitt - 183-1 - Kernel Dump: Support non-local targets rhbz#1651691 - Fix firewall page oops when not selecting anything rhbz#1652207 - Fix changing user's own password rhbz#1652304 - Never send Content-Length with chunked encoding rhbz#1652511 - Include "Web Console" in package description rhbz#1653617 - Respect SSH configuration * Mon Nov 12 2018 Martin Pitt - 181-1 - Fix key typing in file auto complete widget rhbz#1644195 - Fix enabling firewalld rhbz#1646936 * Fri Oct 12 2018 Martin Pitt - 180-1 - Move to ssh SHA256 fingerprints rhbz#1637069 * Thu Oct 04 2018 Martin Pitt - 179-1 - Various crash fixes (coverity) rhbz#1635182 - Updates for React 16 (for future backports) rhbz#1635182 - Fix building with platform-python rhbz#1631174 * Wed Sep 19 2018 Martin Pitt - 178-1 - Fix remote unauthenticated crash with crafted URLs rhbz#1627634 - Fix large downloads stalling after a few megabytes rhbz#1626847 - Recommend system-logos to ensure correct branding rhbz#1626066 * Wed Sep 05 2018 Martin Pitt - 177-1 - Support centrally-managed SSH known hosts rhbz#1622835 - Drop support for Internet Explorer rhbz#1619993 * Thu Aug 23 2018 Martin Pitt - 176-1 - Fix Cockpit activation message (/etc/issue.d) rhbz#1615316 - Suggest other browsers when browser is unsupported rhbz#1619993 * Tue Aug 21 2018 Martin Pitt - 175-2 - Fix building against libssh 0.8 rhbz#1615508 * Wed Aug 8 2018 Marius Vollmer - 175-1 - Storage: Network bound disk encryption - cockpit-ostree is now in its own source package * Thu Aug 2 2018 Marius Vollmer - 174-1 - Kubernetes: VM detail page - Realmd: Install on demand - firewalld service is now being dropped by upstream - iscsi works fully now * Wed Jul 25 2018 Martin Pitt - 173-1 - Storage: Offer installation of VDO - Machines: Add disks to a virtual machine * Wed Jul 11 2018 Martin Pitt - 172-1 - System: Offer installation of PCP - Software Updates: Improve layout in mobile mode - Remove ability to drop privileges from navigation bar - API: Introduce flow control for all channels - Python 3 support rhbz#1561472 * Tue Jul 10 2018 Martin Pitt - 171-3 - Really fix tests * Mon Jul 09 2018 Martin Pitt - 171-2 - Fix tests - Drop firewalld service, add corresponding conflict * Wed Jun 27 2018 Martin Pitt - 171-1 - Machines: Add virtual CPU configuration - Kubernetes: Add KubeVirt pod metrics - Docker: Show container volumes - Fix broken actions for non-administrators - Networking: Handle non-running NetworkManager - Accounts: User role improvements - Localize times * Wed Jun 13 2018 Martin Pitt - 170-1 - Software Updates: Layout rework - oVirt: Use authenticated libvirt connection by default - Disable optional packages, they moved to cockpit-appstream source - Drop dashboard recommends from metapackage, not RHEL ready yet * Wed May 30 2018 Martin Pitt - 169-1 - Storage: Offer installation of NFS client support - System: Request FreeIPA SSL certificate for Cockpit's web server - Services: Show unit relationships - Provide motd help about how to access cockpit * Wed May 16 2018 Martin Pitt - 168-1 - Improve checks for root privilege availability * Wed May 02 2018 Martin Pitt - 167-1 - Networking: Add Firewall Configuration - Kubernetes: Show Kubevirt Registry Disks * Wed Apr 18 2018 Martin Pitt - 166-1 - Kubernetes: Add creation of Virtual Machines - Realms: Automatically set up Kerberos keytab for Cockpit web server - Numbers now get formatted correctly for the selected language * Wed Apr 04 2018 Martin Pitt - 165-1 - Storage: Show more details of sessions and services that keep NFS busy - Machines: Detect if libvirtd is not running - Machines: Show virtual machines that are being created * Wed Mar 21 2018 Martin Pitt - 164-1 - Storage: Move NFS management into new details page - System: Show available package updates and missing registration - System: Fix inconsistent tooltips - Logs: Change severities to officially defined syslog levels - Machines: Add error notifications - Accessibility improvements - Reloading the page in the browser now reloads Cockpit package manifests * Wed Mar 07 2018 Martin Pitt - 163-1 - Drop "Transfer data asynchronously" VDO option on Storage page - Hide Docker storage pool reset button when it cannot work properly - Update jQuery to version 3.3.1 (deprecated cockpit API!) * Fri Feb 09 2018 Igor Gnatenko - 161-2 - Escape macros in %%changelog * Wed Feb 07 2018 Martin Pitt - 161-1 - New VMs can be created on Machines page - VMs running in Kubernetes can now be deleted - Improve LVM volume resizing - Add new Hardware Information page - Load Application metadata (Appstream) packages on demand on Debian/Ubuntu - Rename cockpit-ovirt package to cockpit-machines-ovirt - Stop advertising and supporting cockpit-bundled jQuery library * Wed Feb 07 2018 Fedora Release Engineering - 160-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jan 24 2018 Martin Pitt - 160-1 - Add kubevirt Virtual Machines overview - Redesign package list on Software Updates page and show RHEL Errata - Install AppStream collection metadata packages on demand on Apps page - Add AppStream metadata to cockpit-sosreport for showing up on Apps page - Change CPU graphs to use "100%%" for a fully loaded multi-processor system - Show storage, network, and other numbers with 3 digits of precision - Add an example bastion container * Sat Jan 20 2018 Björn Esser - 159-2 - Rebuilt for switch to libxcrypt * Wed Jan 10 2018 Martin Pitt - 159-1 - Configure data deduplication with VDO devices on Storage page - Add serial console to virtual Machines page and redesign the Consoles tab - Show more error message details for failures on virtual Machines page * Wed Dec 13 2017 Martin Pitt - 158-1 - Add check boxes for common NFS mount options - Clarify Software Update status if only security updates are available - Create self-signed certificates with SubjectAltName * Thu Nov 30 2017 Martin Pitt - 157-1 - Add Networks tab to overview on Machines page - The Apps page now displays SVG app icons * Thu Nov 16 2017 Martin Pitt - 156-1 - Redesign navigation and support mobile browsing - Use /etc/cockpit/krb5.keytab if present to support alternate keytabs - Add project homepage link to Apps page - Maintain issue(5) file with current Cockpit status - Use event-driven refresh of oVirt data instead of polling * Tue Nov 07 2017 Martin Pitt - 155-1 - Add NFS client support to the Storage page - Add "Maintenance" switch for oVirt hosts - Fix Terminal rendering issues in Chrome - Prevent closing Terminal with Ctrl+W when focused - Support the upcoming OpenShift 3.7 release * Wed Oct 18 2017 Martin Pitt - 154-1 - Center the "Disconnected" message in the content area - Fix two layout regressions on the Cluster page - Remove long-obsolete "./configure --branding" option * Tue Oct 17 2017 Martin Pitt - 153-1 - Add cockpit-ovirt package to control oVirt virtual machine clusters - Clean up rpmlint/lintian errors in the packages * Fri Oct 06 2017 Martin Pitt - 152-1 - Add Applications page - Add automatic update configuration for dnf to Software Updates - Fix cockpit-bridge crash if /etc/os-release does not exist * Mon Sep 25 2017 Stef Walter - 151-2 - Add simulated test failure * Thu Sep 21 2017 Martin Pitt - 151-1 - Support loading SSH keys from arbitrary paths - Support X-Forwarded-Proto HTTP header for Kubernetes - Fix Kubernetes connection hangs (regression in version 150) * Fri Sep 08 2017 Martin Pitt - 150-1 - Automatically enable and start newly created timers on the Services page - Support cockpit-dashboard installation into OSTree overlay on Atomic - Support Kubernetes basic auth with Google Compute Engine 1.7.x * Mon Aug 21 2017 petervo - 149-1 - Support sending non-maskable interrupt to VMs - Fix building on fedora 27 - Add information about non-met conditions for systemd services - Clear cockpit cookie on logout * Wed Aug 02 2017 Fedora Release Engineering - 146-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 146-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Jul 21 2017 Martin Pitt - 146-1 - Show recent updates and live update log on Software Updates page - Improve available Software Updates table layout for small/mobile screens - Support OAuth Kubernetes logins to work with Google Compute Engine - Fix reporting ABRT crashes that are already known to the server - Scroll the virtual machine VNC console into view automatically * Fri Jul 07 2017 Martin Pitt - 145-1 - Resize the terminal dynamically to use all available space - Let the Machines page update immediately after changes - Add delete VM functionality to the Machines page - Retire support for external Machines provider API - Always recommend rebooting after applying Software Updates - Group D-Bus channels to avoid hitting connection limits - Fix building on Fedora Rawhide/glibc 2.25.90 * Mon Jun 19 2017 Martin Pitt <> - 143-1 - Add "Software Updates" page for package (rpm/deb) based operating systems - Fix cockpit-machines package to make inline VNC console actually work - Fix Kubernetes authentication when Kubernetes configured for RBAC - Build Docker page for s390x architecture * Fri Jun 09 2017 Martin Pitt <> - 142-1 - Virtual machines display an interactive console, either in browser, or a popup viewer - Fix Virtual Machines operations on non-English locales - Add documentation explaining how to grant/restrict access via polkit rules * Fri Apr 21 2017 Martin Pitt <> - 139-1 - Show more information about virtual machines, such as boot order - Fix enablement of timer systemd units created on Services page - Fix Storage crash on multiple iSCSI sessions - cockpit-docker is now installable with docker-ce or other alternatives - Hide docker push commands on Registry image pages for "pull" roles * Mon Apr 10 2017 Stef Walter <> - 138-1 - Only allow mdraid disk removal when it won't destroy data - Allow DN style usernames in the Kubernetes dashboard - Simplify protocol that cockpit talks to session authentication processes * Thu Mar 30 2017 Martin Pitt <> - 137-1 - Read ~/.ssh/known_hosts for connecting to remote machines with ssh - The Storage LVM setup can add unpartitioned free space as a physical volume - NetworkManager's Team plugin can be used on architectures other than x86_64 - Cockpit's web server understands and properly responds to HTTP HEAD requests - Allow parameter substitution in manifest when spawning peer bridges * Thu Mar 09 2017 Martin Pitt <> - 134-1 - Show /etc/motd in the "System" task page - Drop "System" service actions which are intended for scripts - Make login page translatable - NetworkManager now activates slave interfaces by itself - Add call timeout option to the cockpit.dbus() API - The Debian packaging is now able to apply binary patches * Thu Mar 02 2017 Martin Pitt <> - 133-1 - Remotely managed machines are now configured in /etc/cockpit/machines.d/*.json - Fix NetworkManager's "MTU" dialog layout - Build the cockpit-tests package for releases too - Split translations into individual packages - Packages now configure alternate cockpit-bridge's to interact with the system * Thu Feb 23 2017 Martin Pitt <> - 132-1 - Make basic SELinux functionality available without setroubleshootd - Allow changing the MAC address for ethernet adapters and see them for bonds - Hide "autoconnect" checkbox for network devices without settings - Support for external providers other than libvirt on Machines page - Some tooltip fixes - Add option to restrict max read size to the Cockpit file API - Relax dependencies on cockpit-bridge package on Debian/Ubuntu - Rename cockpit-test-assets package to cockpit-tests - When touching patched files handle case of only one file - Always build the cockpit-tests subpackage * Mon Feb 06 2017 Stef Walter <> - 131-1 - Show session virtual machines on Machines page - Fix use of the TAB key on login page - Robust naming and detection of network bond master - Debian packaging fixes * Wed Jan 25 2017 Stef Walter <> - 130-1 - cockpit.file() can read non-memory-mappable file - Add kdump configuration user interface - Allow container Registry Console user names with '@' sign * Wed Jan 18 2017 Stef Walter <> - 129-1 - Diagnostic sosreport feature now works on RHEL Atomic again - The configure script has a --disable-ssh option to toggle libssh dep - The configure --disable-ws option has been replaced with above. - Unit tests have been fixed on recent GLib versions - Several Fedora and Debian packaging fixes * Wed Dec 14 2016 Stef Walter <> - 126-1 - Show security scan information about containers - Choose whether password is cached and reused on login screen - Allow renaming of active devices in networking interface - More clearly indicate when checking network connectivity - The remotectl command can now combine certificate and key files - Support Openshift's certificate autogeneration when used as a pod - The remotectl tool now checks for keys in certificate files - Domain join operations can now be properly cancelled - Make Kerberos authentication work even if gss-proxy is in use - Javascript code can now export DBus interfaces - When proxied, support X-Forwarded-Proto - Ignore block devices with a zero size in the storage interface * Thu Nov 24 2016 Stef Walter <> - 125-1 - Cockpit is now properly translatable - Display OSTree signatures - New expandable views for storage devices - No longer offer to format read-only block devices - Use stored passphrases for LUKS devices properly - Start testing on RHEL 7.3 - More strict about transport channels a bridge accepts - System shutdown can be scheduled by date * Wed Nov 16 2016 Stef Walter <> - 124-1 - Build and test on Debian Jessie - Deprecate older javascript files - Properly terminate user sessions on the Accounts page - Fix regression on login screen in older Internet Explorer browsers - Fix regression where Date Picker was not shown in System Time dialog * Thu Nov 10 2016 Stef Walter <> - 123-1 - Release a second tarball with cached javascript dependencies - Start verifying that Cockpit works on Ubuntu 16.04 - Enable and verify the network functionality on Debian - Integration tests now log core dumps for diagnosis * Tue Nov 01 2016 Stef Walter - 122-1 - Works with UDisks in addition to storaged - Allow logging into other systems from login page - Explicitly specify javascript dependency versions * Fri Oct 28 2016 Stef Walter - 121-1 - Network Manager Checkpoints - Add Debian Branding - Fix GSSAPI login on Debian and Ubuntu - Generate map files for debugging Javascript and CSS * Sat Oct 22 2016 Stef Walter - 120-1 - New containers page layout - Quick filtering of containers and images on the container page - Added sidebar for phisical volumes in a volume group - Run a separate cockpit-ssh process when making SSH connections - Allow connecting to remote machines from the login page - Only connect to remote machines already known to Cockpit - Fix bugs preventing journal page from working on Firefox 49 - Add tooltip describing group name in Roles list * Sat Oct 01 2016 Dennis Gilmore - 119-2 - enabled cockpit-docker on aarch64, ppc64, ppc64le * Thu Sep 29 2016 petervo - 119-1 - Adds basic VM Management and Monitoring - MDRaid job improvements - Show unmanaged network devices - Better errors when formating storage devices - Updated VNC example - Port subscriptions package to react - Allow branding.css to overide shell css * Wed Sep 07 2016 Stef Walter - 118-1 - Support PAM conversations on the Login screen - Users can create systemd timer jobs - Provide default names for volume groups and logical volumes - Make Docker graphs work on Debian - Only offer to format disks with supported file systems - Show all managed NetworkManager devices - Use webpack for building Cockpit javascript - Cockpit URLs can be proxied with a configured HTTP path prefix - Allow Cockpit packages to require a minimum version of Cockpit - Translations fixes * Thu Aug 11 2016 Stef Walter - 0.117-1 - * Add support for network teams - * Select translations for complex language names - * Don't allow formating extended partitions - * Can configure Openshift Registry so anonymous users can pull images * Fri Jul 29 2016 Stef Walter - 0.116-1 - * Support for volumes when starting a docker container - * Support for setting environment variables in a docker container - * Fix regressions that broke display of localized text * Thu Jul 21 2016 Stef Walter - 0.115-1 - * Setup Docker container and image storage through the UI - * Use Webpack to build Cockpit UI packages - * Update the Cockpit Vagrant development box to use Fedora 24 * Tue Jul 12 2016 Stef Walter - 0.114-1 - .104 - * Network configuration of the Ethernet MTU - * Red Hat Subscriptions can now specify activation keys and orgs - * Start integration testing on CentOS - * SSH Host keys are show on system page - * Machine ID is shown on system page - * Show intelligent password score error messages * Thu Jul 07 2016 Stef Walter - 0.113-1 - * Show timer information for systemd timer jobs - * Use 'active-backup' as the default for new network bonds - * When changing system time check formats properly - * Hide the machine asset tag when no asset exists - * Disable the network on/off switch for unknown or unmanaged interfaces - * Show full string for system hardware info and operating system name * Wed Jun 29 2016 Stef Walter - 0.112-1 - * Don't show network interfaces where NM_CONTROLLED=no is set - * Add textual fields to container memory and CPU sliders - * Display contianer memory and CPU resources on Debian - * Disable tuned correctly when clearing a performance profile - * Fix SELinux enforcing toggle switch and status * Tue Jun 21 2016 Stef Walter - 0.111-1 - * Tarball build issue in 0.110 is now fixed - * The Containers page layouts have been tweaked - * Make the Containers resource limits work again - * Registry image now have layers displayed correctly * Thu Jun 02 2016 Dominik Perpeet - 0.109-1 - * API stabilization, structural cleanup - * SELinux Troubleshooting: documentation, support latest API - * Update Patternfly - * Use CockpitLang cookie and Accept-Language for localization - * Can now click through to perform administration tasks on Nodes on the Cluster dashboard - * Cockpit terminal now supports shells like fish * Fri May 27 2016 Stef Walter - 0.108-1 - * SELinux troubleshooting alerts can now be dismissed - * Show SELinux icon for critical alerts - * SELinux enforcing mode can be turned off and on with a switch - * Kubernetes Nodes are now include charts about usage data - * Fix Debian dependency on Docker - * Update the look and feel of the toggle switch - * Update ListenStream documentation to include address info * Fri May 20 2016 Stef Walter - 0.107-1 - * Display image stream import errors - * Add GlusterFS persistent volumes in Cluster dashboard - * Show a list of pending persistent volume claims - * jQuery Flot library is no longer part of the base1 package - * Fix Content-Security-Policy issues with jQuery Flot * Thu May 12 2016 Stef Walter - 0.106-1 - * Add namespaces to cockpit CSS classes - * Display container image layers in a simpler graph - * Hide actions in Cluster projects listing that are not accessible * Wed May 04 2016 Stef Walter - 0.105-1 - * Strict Content-Security-Policy in all shipped components of Cockpit - * Can now add and remove Openshift users to and from groups - * Add timeout setting for Cockpit authentication - * Registry interface now has checkbox for mirroring from insecure registries - * Kubernetes dashboard now allows deletion of Nodes * Thu Apr 28 2016 Stef Walter - 0.104-1 - * Show errors correctly when deleting or modifying user accounts - * Add support for iSCSI cluster volumes - * Strict Content-Security-Policy in the dashboard, sosreport and realmd code - * Better list expansion and navigation behavior across Cockpit - * Don't show 'Computer OU' field when leaving a domain - * Remove usage of bootstrap-select - * Show errors properly in performance profile dialog - * Fix Cluster sidebar to react to window size - * Allow specifying specific tags in registry image streams - * Make registry project access policy more visible * Tue Apr 19 2016 Stef Walter - 0.103-1 - * Strict Content-Security-Policy for subscriptions component - * New dialog for Kubernetes connection configuration - * Release to a cockpit-project Ubuntu PPA - * Remove jQuery usage from cockpit.js - * New styling for cluster dashboard - * Fix build issue on MIPS * Thu Apr 14 2016 Stef Walter - 0.102-1 - * Can configure Docker restart policy for new containers - * Use a single dialog for creating logical volumes - * Package and test the storage UI on Debian - * Don't offer 'Computer OU' when joining IPA domains - * Don't distribute jshint build dependency due to its non-free license * Fri Feb 12 2016 Stef Walter - 0.95-1 - * iSCSI initiator support on the storage page - * Page browser title now uses on operating system name - * Better look when Cockpit disconnects from the server - * Avoid use of NFS in the Vagrantfile - * Expand 'Tools' menu when navigating to one of its items - * Set a default $PATH in cockpit-bridge * Tue Feb 02 2016 Stef Walter - 0.94-1 - * Handle interruptions during cockpit-ws start while reading from /dev/urandom - * Remove BIOS display from Server Summary page - * Support tuned descriptions - * Fix Content-Security-Policy in example manifest.json files * Mon Jan 25 2016 Stef Walter - 0.93-1 - * Set system performance profile via tuned - * Support for WebSocket client in cockpit-bridge - * Support using Nulecule with Openshift - * Actually exit cockpit-ws when it's idle * Wed Jan 20 2016 Stef Walter - 0.92-1 - * OAuth login support - * Update Patternfly - * Log to stderr when no journal - * Make sosreport work on RHEL and Atomic * Thu Jan 14 2016 Stef Walter - 0.91-1 - * Fix computing of graph samples on 32-bit OS - * Distribute licenses of included components - * Distribute development dependencies - * Support 'make clean' properly in the tarball * Tue Jan 05 2016 Stef Walter - 0.90-1 - * Fix Content-Security-Policy which broke loading in certain situations - * Deal correctly with failures trying to join unsupported domains - * Add documentation about Cockpit startup - * Better data in storage usage graphs - * Start creating debian source packages * Tue Dec 22 2015 Stef Walter - 0.89-1 - * Start routine testing of Cockpit on Debian Unstable - * Make the config file case insensitive - * Reorder graphs on server summary page - * Don't suggest syncing users when adding a machine to dashboard - * Enable weak dependencies for F24+ - * Show correct data in per interface network graphs - * Fix the Vagrantfile to pull in latest Cockpit - * Add Content-Security-Policy header support * Fri Dec 18 2015 Stef Walter - 0.88-1 - * User interface for OSTree upgrades and rollbacks - * General reusable purpose angular kubernetes client code - * Allow custom login scripts for handling authentication - * A specific dashboards can now be the default destination after login - * Kill ssh-agent correctly when launched by cockpit-bridge - * Add a new cockpit-stub bridge for non-local access * Thu Dec 10 2015 Stef Walter - 0.87-1 - * Fix login on Windows, don't prompt for additional auth - * Use the machine host name in the default self-signed certificate - * Cockpit release tarballs are now distributed in tar-ustar format - * Allow overriding package manifests - * Testing and build fixes * Fri Dec 04 2015 Stef Walter - 0.86-1 - * SOS report UI page - * Simpler way for contributors to build cockpit RPMs - * Infrastructure for implementing downloads * Wed Nov 18 2015 Stef Walter - 0.84-1 - * Add a cockpit manual page - * Set correct SELinux context for certificates - * Remove custom SELinux policy - * Testing and bug fixes * Tue Nov 03 2015 Stef Walter - 0.83-1 - * Fix NTP server configuration bugs - * Kubernetes dashboard topology icons don't leave the view - * Kubernetes dashboard uses shared container-terminal component - * Fix race when adding machine to Cockpit dashboard - * Updated documentation for running new distributed tests - * Lots of other bug and testing fixes * Wed Oct 28 2015 Stef Walter - 0.82-1 - * Support certificate chains properly in cockpit-ws - * Rename the default self-signed certificate - * Implement distributed integration testing * Wed Oct 21 2015 Stef Walter - 0.81-1 - * Allow configuring NTP servers when used with timesyncd - * Fix regression in network configuration switches - * Make the various graphs look better - * Openshift Routes and Deployment Configs can be removed - * Run integration tests using TAP "test anything protocol" - * Lots of other bug fixes and cleanup * Wed Oct 14 2015 Stef Walter - 0.80-1 - * UI for loading, viewing, changing Private SSH Keys - * Always start an ssh-agent in the cockpit login session - * New listing panel designs - * Lots of testing and bug fixes * Wed Oct 07 2015 Stef Walter - 0.79-1 - * Vagrant file for Cockpit development - * Use libvirt for testing - * Display only last lines of Kubernetes container logs * Wed Sep 30 2015 Stef Walter - 0.78-1 - * Fix extreme CPU usage issue in 0.77 release - * Fix compatibility with older releases - * Offer to activate multipathd for multipath disks - * Guide now contains insight into feature internals - * Lots of other minor bug fixes * Wed Sep 23 2015 Marcin Juszkiewicz - 0.77-1.1 - disable FMA support to get it pass all tests on secondary architectures - removed duplicated "global rel 1" * Tue Sep 22 2015 Stef Walter - 0.77-1 - * Work better with multipath storage - * Deletion of kubernetes objects - * Cleaner URLs in the bookmark bar - * Show a warning when adding too many machines - * Make authentication work when embedding Cockpit - * Complete componentizing Cockpit * Wed Sep 16 2015 Stef Walter - 0.76-1 - * Fix displaying of network bonds - * Better Kubernetes filter bar, shell access - * Show some Openshift related objects - * Use patternfly v2.2 * Thu Sep 10 2015 petervo - 0.75-1 - New design for kubernetes listing pages - Namespace filter for kubernetes - Pretty http error pages - Lots of bugs, build and testing fixes * Thu Sep 03 2015 Stef Walter - 0.74-1 - * Display an intelligent message when password auth is not possible - * Correctly start terminal in home directory - * NetworkManager code is in a separate package - * PCP is an optional build dependency - * Lots of bugs, build and testing fixes * Wed Aug 26 2015 Stef Walter - 0.73-1 - * Kubernetes UI can connect to non-local API server - * Automate Web Service container build on Docker Hub - * Add validation options to TLS client connections - * PAM pam_ssh_add.so module for loading SSH keys based on login password - * Build, testing and other fixes * Mon Aug 17 2015 Peter - 0.71-1 - Update to 0.71 release. * Wed Aug 12 2015 Stef Walter - 0.70-1 - Depend on kubernetes-client instead of kubernetes - Update to 0.70 release. * Thu Aug 06 2015 Stef Walter - 0.69-1 - Update to 0.69 release. * Wed Jul 29 2015 Peter - 0.68-1 - Update to 0.68 release. * Thu Jul 23 2015 Peter - 0.66-1 - Update to 0.66 release * Fri Jul 17 2015 Peter - 0.65-2 - Require libssh 0.7.1 on fedora >= 22 systems * Wed Jul 15 2015 Peter - 0.65-1 - Update to 0.65 release * Wed Jul 08 2015 Peter - 0.64-1 - Update to 0.64 release * Wed Jul 01 2015 Peter - 0.63-1 - Update to 0.63 release - Remove cockpit-docker for armv7hl while docker packages are being fixed * Thu Jun 25 2015 Peter - 0.62-1 - Update to 0.62 release * Wed Jun 17 2015 Fedora Release Engineering - 0.61-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Wed Jun 10 2015 Peter - 0.61-1 - Update to 0.61 release * Mon Jun 01 2015 Stef Walter - 0.60-1 - Update to 0.60 release * Wed May 27 2015 Peter - 0.59-1 - Update to 0.59 release * Fri May 22 2015 Peter - 0.58-1 - Update to 0.58 release * Wed May 20 2015 Peter - 0.57-1 - Update to 0.57 release * Wed May 13 2015 Peter - 0.56-1 - Update to 0.56 release * Wed May 06 2015 Stef Walter - 0.55-1 - Update to 0.55 release * Fri Apr 24 2015 Peter - 0.54-1 - Update to 0.54 release * Tue Apr 21 2015 Peter - 0.53-1 - Update to 0.53 release * Thu Apr 16 2015 Stef Walter - 0.52-1 - Update to 0.52 release * Tue Apr 14 2015 Peter - 0.51-1 - Update to 0.51 release * Tue Apr 07 2015 Stef Walter - 0.50-1 - Update to 0.50 release * Wed Apr 01 2015 Stephen Gallagher 0.49-2 - Fix incorrect Obsoletes: of cockpit-daemon * Wed Apr 01 2015 Peter - 0.49-1 - Update to 0.49 release. - cockpitd was renamed to cockpit-wrapper the cockpit-daemon package was removed and is now installed with the cockpit-bridge package. * Mon Mar 30 2015 Peter - 0.48-1 - Update to 0.48 release * Mon Mar 30 2015 Stephen Gallagher 0.47-2 - Don't attempt to build cockpit-kubernetes on armv7hl * Fri Mar 27 2015 Peter - 0.47-1 - Update to 0.47 release, build docker on armvrhl * Thu Mar 26 2015 Stef Walter - 0.46-1 - Update to 0.46 release * Mon Mar 23 2015 Stef Walter - 0.45-1 - Update to 0.45 release * Sat Mar 21 2015 Stef Walter - 0.44-3 - Add back debuginfo files to the right place * Fri Mar 20 2015 Stef Walter - 0.44-2 - Disable separate debuginfo for now: build failure * Fri Mar 20 2015 Stef Walter - 0.44-1 - Update to 0.44 release * Thu Mar 19 2015 Stef Walter - 0.43-2 - Don't break EPEL or CentOS builds due to missing branding * Wed Mar 18 2015 Stef Walter - 0.43-1 - Update to 0.43 release * Tue Mar 17 2015 Stef Walter - 0.42-2 - Fix obseleting cockpit-assets * Sat Mar 14 2015 Stef Walter - 0.42-1 - Update to 0.42 release * Wed Mar 04 2015 Stef Walter - 0.41-1 - Update to 0.41 release * Thu Feb 26 2015 Stef Walter - 0.40-1 - Update to 0.40 release * Thu Feb 19 2015 Stef Walter - 0.39-1 - Update to 0.39 release * Wed Jan 28 2015 Stef Walter - 0.38-1 - Update to 0.38 release * Thu Jan 22 2015 Stef Walter - 0.37-1 - Update to 0.37 release * Mon Jan 12 2015 Stef Walter - 0.36-1 - Update to 0.36 release * Mon Dec 15 2014 Stef Walter - 0.35-1 - Update to 0.35 release * Thu Dec 11 2014 Stef Walter - 0.34-1 - Update to 0.34 release * Fri Dec 05 2014 Stef Walter - 0.33-3 - Only depend on docker stuff on x86_64 * Fri Dec 05 2014 Stef Walter - 0.33-2 - Only build docker stuff on x86_64 * Wed Dec 03 2014 Stef Walter - 0.33-1 - Update to 0.33 release * Mon Nov 24 2014 Stef Walter - 0.32-1 - Update to 0.32 release * Fri Nov 14 2014 Stef Walter - 0.31-1 - Update to 0.31 release * Wed Nov 12 2014 Stef Walter - 0.30-1 - Update to 0.30 release - Split Cockpit into various sub packages * Wed Nov 05 2014 Stef Walter - 0.29-3 - Don't require test-assets from selinux-policy - Other minor tweaks and fixes * Wed Nov 05 2014 Stef Walter - 0.29-2 - Include selinux policy as a dep where required * Wed Nov 05 2014 Stef Walter - 0.29-1 - Update to 0.29 release * Thu Oct 16 2014 Stef Walter - 0.28-1 - Update to 0.28 release - cockpit-agent was renamed to cockpit-bridge * Fri Oct 10 2014 Stef Walter - 0.27-1 - Update to 0.27 release - Don't create cockpit-*-admin groups rhbz#1145135 - Fix user management for non-root users rhbz#1140562 - Fix 'out of memory' error during ssh auth rhbz#1142282 * Wed Oct 08 2014 Stef Walter - 0.26-1 - Update to 0.26 release - Can see disk usage on storage page rhbz#1142459 - Better order for lists of block devices rhbz#1142443 - Setting container memory limit fixed rhbz#1142362 - Can create storage volume of maximum capacity rhbz#1142259 - Fix RAID device Bitmap enable/disable error rhbz#1142248 - Docker page connects to right machine rhbz#1142229 - Clear the format dialog label correctly rhbz#1142228 - No 'Drop Privileges' item in menu for root rhbz#1142197 - Don't flash 'Server has closed Connection on logout rhbz#1142175 - Non-root users can manipulate user accounts rhbz#1142154 - Fix strange error message when editing user accounts rhbz#1142154 * Wed Sep 24 2014 Stef Walter - 0.25-1 - Update to 0.25 release * Wed Sep 17 2014 Stef Walter - 0.24-1 - Update to 0.24 release * Wed Sep 10 2014 Stef Walter - 0.23-1 - Update to 0.23 release * Wed Sep 03 2014 Stef Walter - 0.22-1 - Update to 0.22 release * Tue Aug 26 2014 Patrick Uiterwijk - 0.21-1 - Update to 0.21 release * Sat Aug 16 2014 Fedora Release Engineering - 0.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Thu Aug 14 2014 Stef Walter 0.20-1 - Update to 0.20 release * Thu Aug 07 2014 Stef Walter 0.19-1 - Update to 0.19 release * Wed Jul 30 2014 Stef Walter 0.18-1 - Update to 0.18 release - Add glib-networking build requirement - Let selinux-policy-targetted distribute selinux policy * Mon Jul 28 2014 Colin Walters 0.17-2 - Drop Requires and references to dead test-assets subpackage * Thu Jul 24 2014 Stef Walter 0.17-1 - Update to 0.17 release * Wed Jul 23 2014 Stef Walter 0.16-3 - Distribute our own selinux policy rhbz#1110758 * Tue Jul 22 2014 Stef Walter 0.16-2 - Refer to cockpit.socket in scriptlets rhbz#1110764 * Thu Jul 17 2014 Stef Walter 0.16-1 - Update to 0.16 release * Thu Jul 10 2014 Stef Walter 0.15-1 - Update to 0.15 release - Put pam_reauthorize.so in the cockpit PAM stack * Thu Jul 03 2014 Stef Walter 0.14-1 - Update to 0.14 release * Mon Jun 30 2014 Stef Walter 0.13-1 - Update to 0.13 release * Tue Jun 24 2014 Stef Walter 0.12-1 - Update to upstream 0.12 release * Fri Jun 20 2014 Stef Walter 0.11-1 - Update to upstream 0.11 release * Thu Jun 12 2014 Stef Walter 0.10-1 - Update to upstream 0.10 release * Sat Jun 07 2014 Fedora Release Engineering - 0.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 23 2014 Stef Walter 0.9-1 - Update to upstream 0.9 release - Fix file attribute for cockpit-polkit * Wed May 21 2014 Stef Walter 0.8-1 - Update to upstream 0.8 release - cockpitd now runs as a user session DBus service * Mon May 19 2014 Stef Walter 0.7-1 - Update to upstream 0.7 release * Wed May 14 2014 Stef Walter 0.6-1 - Update to upstream 0.6 release * Tue Apr 15 2014 Stef Walter 0.5-1 - Update to upstream 0.5 release * Thu Apr 03 2014 Stef Walter 0.4-1 - Update to upstream 0.4 release - Lots of packaging cleanup and polish * Fri Mar 28 2014 Stef Walter 0.3-1 - Update to upstream 0.3 release * Wed Feb 05 2014 Patrick Uiterwijk (LOCAL) - 0.2-0.4.20140204git5e1faad - Redid the release tag * Tue Feb 04 2014 Patrick Uiterwijk (LOCAL) - 0.2-0.3.5e1faadgit - Fixed license tag - Updated to new FSF address upstream - Removing libgsystem before build - Now claiming specific manpages - Made the config files noreplace - Removed the test assets - Put the web assets in a subpackage * Tue Feb 04 2014 Patrick Uiterwijk (LOCAL) - 0.2-0.2.5e1faadgit - Patch libgsystem out