Updates
This commit is contained in:
@@ -59,6 +59,8 @@ sudo vim /etc/caddy/Caddyfile
|
|||||||
email admin@delmar.bzh
|
email admin@delmar.bzh
|
||||||
default_sni delmar.bzh
|
default_sni delmar.bzh
|
||||||
|
|
||||||
|
admin :2019
|
||||||
|
|
||||||
acme_dns ovh {
|
acme_dns ovh {
|
||||||
endpoint ovh-eu
|
endpoint ovh-eu
|
||||||
application_key 3f8bdfed17f848d8
|
application_key 3f8bdfed17f848d8
|
||||||
@@ -109,6 +111,15 @@ cloud.delmar.bzh {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
cpt.delmar.bzh {
|
||||||
|
reverse_proxy bob:9090 {
|
||||||
|
transport http {
|
||||||
|
tls_insecure_skip_verify
|
||||||
|
}
|
||||||
|
}
|
||||||
|
encode gzip zstd
|
||||||
|
}
|
||||||
|
|
||||||
cs.delmar.bzh {
|
cs.delmar.bzh {
|
||||||
reverse_proxy sheldon:49505
|
reverse_proxy sheldon:49505
|
||||||
encode gzip zstd
|
encode gzip zstd
|
||||||
@@ -253,18 +264,6 @@ vault.delmar.bzh {
|
|||||||
encode gzip zstd
|
encode gzip zstd
|
||||||
}
|
}
|
||||||
|
|
||||||
webmin.delmar.bzh {
|
|
||||||
reverse_proxy bob:10000 {
|
|
||||||
transport http {
|
|
||||||
read_buffer 0
|
|
||||||
write_buffer 0
|
|
||||||
tls_insecure_skip_verify
|
|
||||||
versions 1.1
|
|
||||||
}
|
|
||||||
}
|
|
||||||
encode gzip zstd
|
|
||||||
}
|
|
||||||
|
|
||||||
wizarr.delmar.bzh {
|
wizarr.delmar.bzh {
|
||||||
reverse_proxy gary:5690
|
reverse_proxy gary:5690
|
||||||
encode gzip zstd
|
encode gzip zstd
|
||||||
|
|||||||
106
On host/Cockpit.md
Normal file
106
On host/Cockpit.md
Normal file
@@ -0,0 +1,106 @@
|
|||||||
|
---
|
||||||
|
created: 2025-06-06T10:03:38 (UTC +02:00)
|
||||||
|
tags: []
|
||||||
|
source: https://cockpit-project.org/running.html
|
||||||
|
author:
|
||||||
|
---
|
||||||
|
|
||||||
|
# Running Cockpit — Cockpit Project
|
||||||
|
|
||||||
|
> ## Excerpt
|
||||||
|
> Cockpit makes it easy to administer your Linux servers via a web browser.
|
||||||
|
|
||||||
|
---
|
||||||
|
### Debian
|
||||||
|
|
||||||
|
These commands require a POSIX compatible shell like `bash`. For other shells like `fish`, temporarily run `bash -i`.
|
||||||
|
|
||||||
|
Cockpit is available in Debian since version 10 (Buster).
|
||||||
|
|
||||||
|
1. To get the latest version, we recommend to enable the [backports repository](https://backports.debian.org) (as root):
|
||||||
|
|
||||||
|
```
|
||||||
|
. /etc/os-release
|
||||||
|
echo "deb http://deb.debian.org/debian ${VERSION_CODENAME}-backports main" > \
|
||||||
|
/etc/apt/sources.list.d/backports.list
|
||||||
|
apt update
|
||||||
|
```
|
||||||
|
|
||||||
|
2. Install or update the package:
|
||||||
|
|
||||||
|
```
|
||||||
|
apt install -t ${VERSION_CODENAME}-backports cockpit
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
When updating Cockpit-related packages and any dependencies, make sure to use `-t ...-backports` as above, so backports are included.
|
||||||
|
|
||||||
|
### Ubuntu
|
||||||
|
|
||||||
|
These commands require a POSIX compatible shell like `bash`. For other shells like `fish`, temporarily run `bash -i`.
|
||||||
|
|
||||||
|
Cockpit is available in Ubuntu, with [updated versions in official backports for LTS releases](https://help.ubuntu.com/community/UbuntuBackports).
|
||||||
|
|
||||||
|
We recommend installing or updating the latest version from backports. This repository is enabled by default, but if you customized apt sources you might need to [enable them manually](https://help.ubuntu.com/community/UbuntuBackports#Enabling_Backports).
|
||||||
|
|
||||||
|
```
|
||||||
|
. /etc/os-release
|
||||||
|
sudo apt install -t ${VERSION_CODENAME}-backports cockpit
|
||||||
|
```
|
||||||
|
|
||||||
|
When updating Cockpit-related packages and any dependencies, make sure to use `-t ...-backports` as above, so backports are included.
|
||||||
|
|
||||||
|
#### Cockpit file sharing
|
||||||
|
|
||||||
|
https://github.com/45Drives/cockpit-file-sharing
|
||||||
|
|
||||||
|
#### Cockpit Sensors
|
||||||
|
|
||||||
|
https://github.com/ocristopfer/cockpit-sensors
|
||||||
|
|
||||||
|
#### Cockpit Identities
|
||||||
|
|
||||||
|
https://github.com/45drives/cockpit-identities
|
||||||
|
|
||||||
|
### Not installed (yet)
|
||||||
|
|
||||||
|
#### Cockpit Navigator
|
||||||
|
|
||||||
|
https://github.com/45Drives/cockpit-navigator
|
||||||
|
|
||||||
|
#### Cockpit Files
|
||||||
|
|
||||||
|
https://github.com/cockpit-project/cockpit-files
|
||||||
|
|
||||||
|
#### Cockpit Docker
|
||||||
|
|
||||||
|
https://github.com/chabad360/cockpit-docker
|
||||||
|
|
||||||
|
### Fix networking - Cockpit Software Updates - Loading available updates failed - Cannot refresh cache whilst offline
|
||||||
|
|
||||||
|
> ## Excerpt
|
||||||
|
> On a Ubuntu Server LTS 20.x, with renderer : networkd, LAN / WAN Connectivity
|
||||||
|
are all properly fucntional. However in Cockpit > Software Updates, it gives the error message:
|
||||||
|
Loading available up...
|
||||||
|
|
||||||
|
1. Create a placeholder file and network interface. Create `/etc/NetworkManager/conf.d/10-globally-managed-devices.conf` with the contents:
|
||||||
|
|
||||||
|
> ```
|
||||||
|
> [keyfile]
|
||||||
|
> unmanaged-devices=none
|
||||||
|
> ```
|
||||||
|
|
||||||
|
2. If you run on Ubuntu with arm64 (e.g.: on a Raspberry Pi), install extra Linux kernel modules for networking:
|
||||||
|
|
||||||
|
> ```
|
||||||
|
> sudo apt install linux-modules-extra-raspi
|
||||||
|
> ```
|
||||||
|
|
||||||
|
3. Set up a “dummy” network interface:
|
||||||
|
|
||||||
|
> ```
|
||||||
|
> nmcli con add type dummy con-name fake ifname fake0 ip4 1.2.3.4/24 gw4 1.2.3.1
|
||||||
|
> ```
|
||||||
|
|
||||||
|
4. Reboot (reload service ?)
|
||||||
|
|
||||||
8
Turing Pi/cockpit-file-sharing_nfs.krabs.exports
Normal file
8
Turing Pi/cockpit-file-sharing_nfs.krabs.exports
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
/srv/nfs4 192.168.1.0/24(rw,sync,no_subtree_check,crossmnt,fsid=0)
|
||||||
|
/srv/nfs4/cloud 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/media 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/ebooks 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/git 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/photos 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/downloads 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/backups 192.168.1.0/24(ro,sync,no_subtree_check)
|
||||||
@@ -178,12 +178,17 @@ sudo vim /etc/fstab
|
|||||||
|
|
||||||
```
|
```
|
||||||
# LVM
|
# LVM
|
||||||
UUID=a67ae390-f36c-4b7c-98a0-4a3b5601c107 /mnt/data ext4 defaults,nofail,user_xattr,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
|
UUID=0c390345-ca52-45fd-9097-6e931d651a8f / ext4 defaults,x-systemd.growfs 0 1
|
||||||
# NFS
|
# LVM
|
||||||
/mnt/data/cloud /export/cloud none bind,nofail 0 0
|
/dev/hdds/datas /mnt/data ext4 defaults,nofail,user_xattr,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
|
||||||
/mnt/data/gitea /export/gitea none bind,nofail 0 0
|
# NFS exports
|
||||||
/mnt/data/jellystack /export/jellystack none bind,nofail 0 0
|
/mnt/data/cloud /srv/nfs4/cloud none bind,nofail 0 0
|
||||||
/mnt/data/media /export/media none bind,nofail 0 0
|
/mnt/data/media /srv/nfs4/media none bind,nofail 0 0
|
||||||
|
/mnt/data/ebooks /srv/nfs4/ebooks none bind,nofail 0 0
|
||||||
|
/mnt/data/git /srv/nfs4/git none bind,nofail 0 0
|
||||||
|
/mnt/data/photos /srv/nfs4/photos none bind,nofail 0 0
|
||||||
|
/mnt/data/downloads /srv/nfs4/downloads none bind,nofail 0 0
|
||||||
|
/opt/backups /srv/nfs4/backups none bind,nofail 0 0
|
||||||
```
|
```
|
||||||
|
|
||||||
**PS : Check the content of /var/lib/nfs/etab to show NFS shares list and all the applied permission details**
|
**PS : Check the content of /var/lib/nfs/etab to show NFS shares list and all the applied permission details**
|
||||||
@@ -193,10 +198,14 @@ cat /var/lib/nfs/etab
|
|||||||
```
|
```
|
||||||
|
|
||||||
```shell
|
```shell
|
||||||
/export/media 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
/srv/nfs4 192.168.1.0/24(rw,sync,no_subtree_check,crossmnt,fsid=0)
|
||||||
/export/jellystack 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
/srv/nfs4/cloud 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
/export/gitea 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
/srv/nfs4/media 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
/export/cloud 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
/srv/nfs4/ebooks 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/git 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/photos 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/downloads 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
|
||||||
|
/srv/nfs4/backups 192.168.1.0/24(ro,sync,no_subtree_check)
|
||||||
```
|
```
|
||||||
|
|
||||||
#### Client(s)
|
#### Client(s)
|
||||||
@@ -213,10 +222,10 @@ sudo vim /etc/fstab
|
|||||||
```
|
```
|
||||||
|
|
||||||
```shell
|
```shell
|
||||||
krabs:/export/cloud /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
krabs:/srv/nfs4/cloud /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
||||||
krabs:/export/gitea /nfs/gitea nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
krabs:/srv/nfs4/git /nfs/git nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
||||||
krabs:/export/jellystack /nfs/jellystack nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
krabs:/srv/nfs4/media /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
||||||
krabs:/export/media /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
krabs:/srv/nfs4/ebooks /nfs/ebooks nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
|
||||||
```
|
```
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
@@ -226,4 +235,4 @@ sudo mount /nfs/jellystack
|
|||||||
sudo mount /nfs/media
|
sudo mount /nfs/media
|
||||||
|
|
||||||
sudo systemctl daemon-reload
|
sudo systemctl daemon-reload
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user