How to Set Up Cockpit for Server Management

How to Set Up Cockpit for Server Management

Cockpit is a lightweight, modern web-based server management tool developed by Red Hat. Unlike heavier control panels, Cockpit uses the system's existing APIs and does not install its own configuration layer. This means changes you make in Cockpit are the same as changes made via the command line, and vice versa. It is an excellent choice for managing your Breeze instance visually while maintaining full CLI compatibility.

Why Cockpit

• Zero configuration overhead — uses native system tools under the hood
• Real-time performance monitoring with interactive graphs
• Built-in terminal for quick command-line access from the browser
• Container management (Podman) integration out of the box
• Multi-server management from a single dashboard
• Lightweight: uses minimal RAM when idle

Installation

Cockpit is available in the default repositories for most distributions:

Ubuntu / Debian

sudo apt update
sudo apt install -y cockpit
sudo systemctl enable --now cockpit.socket

CentOS / AlmaLinux / Rocky

sudo dnf install -y cockpit
sudo systemctl enable --now cockpit.socket
sudo firewall-cmd --permanent --add-service=cockpit
sudo firewall-cmd --reload

Accessing the Dashboard

Cockpit listens on port 9090 by default. Open your browser and go to:

https://your-breeze-ip:9090

Log in with any system user that has sudo privileges. Cockpit will prompt you to escalate privileges when administrative actions are needed.

Installing Additional Modules

Extend Cockpit with optional packages for more functionality:

# Storage management (LVM, RAID, NFS)
sudo apt install -y cockpit-storaged

# Container management (Podman)
sudo apt install -y cockpit-podman

# Network management (bonds, bridges, VLANs)
sudo apt install -y cockpit-networkmanager

# Package updates
sudo apt install -y cockpit-packagekit

Managing Multiple Breezes

Cockpit can manage multiple servers from one dashboard. On each remote Breeze, install Cockpit and enable SSH. Then on your primary dashboard:

• Click the host selector in the top-left corner
• Select "Add new host" and enter the remote Breeze IP or hostname
• Authenticate with SSH credentials
• Switch between servers instantly from the dropdown

Security Hardening

• Restrict network access: Edit /etc/cockpit/cockpit.conf to bind only to specific interfaces
• Use a real SSL certificate: Place your certificate at /etc/cockpit/ws-certs.d/ with .cert and .key extensions
• Enable idle timeout: Set IdleTimeout=15 in /etc/cockpit/cockpit.conf under the [Session] section
• Disable root login: Set Root=deny under [Basic] in the configuration file
• Firewall: Only allow port 9090 from trusted IP addresses

Using the Built-In Terminal

Cockpit includes a fully functional web-based terminal under the "Terminal" tab. This is especially useful when you need to run a quick command without opening a separate SSH session. It supports copy-paste, resizing, and works with all standard shell commands.