frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Cockpit is a web-based graphical interface for servers

https://github.com/cockpit-project/cockpit
92•modinfo•2h ago

Comments

stego-tech•1h ago
I've used this before in the early days of my Linux SysAdmin work, especially in the homelab.

It's pretty solid, but the limited amount of projects and lack of visibility into the CLI it uses on the backend hinder the ability to translate sysadmin work into tangible Linux skills, so I dumped it at home in favor of straight SSH sessions and some TUI stuff.

That said, if I gotta babysit Linux in an Enterprise without something like Centrify? Yeah, Cockpit is a solid, user-friendly abstraction layer, especially for WinFolks.

hosh•31m ago
Part of the technical assessment I have for hiring new platform engineers involves troubleshooting a service hosted in a headless Linux vm.

Troubleshooting and fluency on the command line are among what I consider core skills. Being able to dig through abstraction layers is not just essential for when things go wrong, they are essential for building infrastructure, and really tells you whether an architecture is fit for purpose.

dice•14m ago
One of my favorite interview questions: "Here are some SSH credentials. What does this system do?"

Sometimes there aren't any docs. Sometimes the docs are wrong. It's important to be able to establish what the actual running situation is.

DrewADesign•4m ago
Sure... but, I’ve got decades of experience doing that stuff, just not frequently enough to keep it in my head, these days. I usually want a small project server to just do shit and the less there is between that and booting up a fresh Linux install, the better. For example, I don’t keep firewall command line syntax in my head, but I know what needs to be done, and I always seem to need it with small home projects. I lose nothing by having a trustworthy gui do it. I’d give this a shot. I doubt I’d use it in a professional environment, but that’s not really my use case these days.
girvo•1h ago
Cockpit is great! My NAS (built on a weird “N17” AMD 7840HS laptop processor put into a desktop “server”mITX motherboard by those wizards in China) stuck in a Jonsbo N2 with 5x4TB Samsung 870 evos in ZFS raidz1 is entirely managed by it

I keep meaning to look into making plugins for it, but honestly I’ve barely needed to. Cockpit, the 45drives ZFS plugin fork, and the web terminal have been more than enough for me

Scene_Cast2•18m ago
Same here. Using it on two boxes, makes Linux sysadmin work easier.
rovr138•1h ago
Interesting. This looks nice. Made me think of webmin which I used... years ago.

Went to look and webmin's changed. Pretty crazy.

spogbiper•1h ago
i used to set up webmin for the linux challenged admins so they could do basic tasks. it was nice because you could lock them to specific functions in certain modules and make it difficult for them to break things
rovr138•1h ago
yeah! I had some things through there early on when I was building sites. I had some custom scripts that could also be triggered by the users.
tombert•1h ago
I used Cockpit for years after I started having issues with my network card in FreeNAS. It's generally very good, though I never really figured out how to graphically swap out a hard disk in a RAID without trashing the data (which happened once).

I suspect that was user error on my end, so if you want a more-or-less no-nonsense way to manager a server, it's certainly worth checking out.

NewJazz•1h ago
Does this work well with fleets? I remember looking at this early on it seemed fairly single-server focused.
roscas•1h ago
I think they dropped multi server managment because it was possible to add a few servers but I guess they drop that one out. You do can logon into a server right on the logon page. That is nice.
rwmj•1h ago
Red Hat wants you to use Ansible for that.
esseph•16m ago
Red Hat wants you to use Satellite for that, which uses Ansible but also does other things based around package management.
bravetraveler•45m ago
It's pretty single-server focused... but there is a 'Multi Host' mode. One instance can use SSH to look at N systems [independently]. This consolidates the Cockpit endpoints you might need to use/ports to open... but doesn't give much in the way of orchestration.

I believe when 'roscas' says this feature was dropped, they're talking about the requirement to enable 'AllowMultiHost'. As far as I know, this is still supported with some risk (according to the latest docs): https://cockpit-project.org/guide/latest/#secondary-auth

plasticsoprano•1h ago
I tried this out about 2 months ago when setting up a new server. I wanted something simpler and less resource heavy as webmin but it was just too simple. Adding questionable, half baked add-ons to get various functions to work just didn't give me the flexibility of webmin.
bityard•1h ago
I installed the latest Fedora Server on my Framework Desktop and noticed that Cockpit was enabled automatically. Overall impression is that its pretty good for getting a quick overview of things and you can certainly do _some_ administration with it, but you run into its limitations pretty fast trying to get any serious work done with it.

It's probably great for those who are new to Linux and want that NAS-like admin web UI to get the basics set up as a stepping-stone before launching deep into the command line.

roscas•1h ago
It is very nice. I hope more apps and options are added as it makes very simple to do some admin tasks. Want to manage services? No problem, it is very easy. Clear failed and disable? Easy. Want to see some disks and do admin operations on disks? It does. Want a simple system monitor? It tracks cpu, ram and more in a pretty interface. RHEL is dropping old interfaces like cluster management and starting to use Cockpit only. I just wish Cockpit would replace Hawk2 for cluster management as it is better then the old deprecated cluster manager web interface. But yes, install Cockpit or keep it installed ready to be use cause one day it saves the day...
jonym•1h ago
the opinion you didn't ask for:

avoid admin UIs... at best they make you lazy, at worst a security nightmare

dist-epoch•1h ago
If you want people to self-host, this is a gateway to that.
razakel•7m ago
And those who are actually curious will look into what it's doing under the hood.

Everyone has to start somewhere.

krior•46m ago
I just want to check from my phone how my home server is doing. Maybe someone else gets a perverse pleasure out of catting /proc/meminfo but I don't understand the need to make things more complicated than necessary.
grigio•57m ago
Very well done. For me cockpit is more than enough a mainstream proxmox
poppafuze•49m ago
When it evolved a couple years ago to automatically set up the bridge for libvirt correctly, it had arrived. When that thing can set up pushbutton podman apps with decent net and persistence defaults it will be gold.
Gabrys1•49m ago
I tried using this to handle my 10-ish Docker containers, but I ended up using Portainer. Sure, not the same thing, but if someone (like me) thought Cockpit might be nice for managing a small Docker host, this didn't work for me
9dev•42m ago
Going for a shameless plug - I am working on an observability dashboard for Docker Swarm: https://github.com/Radiergummi/cetacean

Also works for a single node cluster. Maybe that’s closer to what you’re looking for.

KronisLV•20m ago
Hey that’s pretty cool, nice to see someone paying attention to Docker Swarm (it’s nice for simple deployments, like multi-server Compose). You might want to add some screenshots to the docs though.

There was also Swarmpit but it didn’t really get that much love, sadly: https://github.com/swarmpit/swarmpit/issues/719

Portainer is pretty nice feature wise but even with lowered MTU I still get odd networking related issues (seems like the agent or whatever cannot reach the manager sometimes) but I’ve had those sorts of issues across multiple different clusters, both in cloud and on-prem with single leader setups and across both RPM and DEB only clusters. Weird stuff, otherwise perhaps the most established solution for Docker Swarm.

evanjrowley•43m ago
Ripe for a supply chain attack. What safeguards do they have to protect against one?
whatever1•32m ago
The same that OpenSSL had with thousands of eyeballs looking at its source code for decades.

Aka 0. Security is a theater for the amateurs.

k_bx•20m ago
The worst one is password based login it enables
cozzyd•18m ago
Well you can use it via ssh so you don't have to open it up to the Internet directly.
WorldPeas•38m ago
cockpit has a great virtualization interface, in my opinion this alone makes it a better "buy" than truenas for a home server.
tryauuum•38m ago
I had a bad experience with it. We hired a contractor and he

1. insisted on a pre-war version of ubuntu

2. insisted on the cockpit. So you no longer can modify the NFS exports over ssh, you need to connect to this HTTP abomination. Very nice. Always wanted to open more ports on my servers

teaearlgraycold•32m ago
Sounds like you had a bad experience with a contractor.
bookwar•37m ago
Question from a Cockpit PO: if you were to choose one feature to add to the project what that feature would be?
mgartin•23m ago
A streamlined way to control "systemctl --user ..." without needing root auth.
cprecioso•23m ago
- Easy OIDC - Generally improve the file manager addon - ncdu-like addon - interface to create simple systemd services - more visibility into which commands you can run to do the same thing
Scene_Cast2•20m ago
Some more love for the updates page. E.g. select a subset of updates to install, be more clear that the last update time could be different if you installed updates via CLI, that kind of thing.
drnick1•35m ago
What is the use case for this over standard command line tools like systemctl, journalctl, top, docker ps?
teaearlgraycold•33m ago
Web UIs are nicer to deal with for simpler tasks. You can use this on your phone easily. Less technical users can be instructed on how to perform simple tasks like remotely powering off a machine.
drnick1•20m ago
Is the overhead of such tools, and added attack surface, justified over sshing and issuing a shutdown command though?
cozzyd•16m ago
You can just run it via ssh anyway....
danparsonson•11m ago
What kind of attack are you anticipating? Surely only a fool or a madman would make such a thing publicly accessible.
bookwar•29m ago
The main difference of Cockpit as opposed to more old school visual server administration tools that it doesn't replace standard server management approaches with its own configuration storage in some weird database.

Edits which you make through cockpit and edits which you make through cli are exactly the same edits in same APIs. You do not need to choose one or the over. You can switch from one to the other seamlessly on a command by command basis.

cozzyd•16m ago
I use it for certain use cases, where it definitely is more convenient. For example, adding a new user or adding an ssh key for a user or debugging SELinux issues.
TimTheTinker•29m ago
I used Webmin[0] back in the day, I wonder how more recent server web UIs like Cockpit stack up.

[0] https://webmin.com/

whalesalad•22m ago
It's neutered and not as full featured, but not bad in a pinch. All of these web admin tools are hacks that call out to shell scripts and whatnot. It requires a lot of conditional behavior and/or vertical integration. "Linux" has no consistent API for control, so its all duct tape. Webmin is the same, tbh (swap perl for whatever cockpit is written in)

45Drives uses cockpit as the UI layer of their "Houston" operating system. https://www.45drives.com/community/articles/New-Operating-Sy...

mindwork•16m ago
I don't mind UI, but I think it's a bad approach. Instead of hiding all those complexities of the server behind UI, I would like to see each part of the application teach me how to achieve the same result in CLI. That would be useful for people to teach themselves, because UI comes and goes but basic linux commands - will stay
handbanana_•15m ago
Comes and goes? Webmin would like a word
babypuncher•4m ago
Both can have their place. I'm pretty familiar with the podman cli, but having a dashboard I can access from a bookmark in my browser is handy when I just want a quick overview of everything.
ElijahLynn•8m ago
Would be nice if the landing page had some graphical pictures for a graphical interface...
bookwar•2m ago
Try https://cockpit-project.org/ :)

Astral to Join OpenAI

https://astral.sh/blog/openai
1133•ibraheemdev•9h ago•704 comments

Cockpit is a web-based graphical interface for servers

https://github.com/cockpit-project/cockpit
92•modinfo•2h ago•52 comments

Google details new 24-hour process to sideload unverified Android apps

https://arstechnica.com/gadgets/2026/03/google-details-new-24-hour-process-to-sideload-unverified...
369•0xedb•5h ago•388 comments

Return of the Obra Dinn: spherical mapped dithering for a 1bpp first-person game

https://forums.tigsource.com/index.php?topic=40832.msg1363742#msg1363742
190•PaulHoule•2d ago•25 comments

How the Turner twins are mythbusting modern technical apparel

https://www.carryology.com/insights/how-the-turner-twins-are-mythbusting-modern-gear/
59•greedo•2d ago•25 comments

Show HN: Three new Kitten TTS models – smallest less than 25MB

https://github.com/KittenML/KittenTTS
280•rohan_joshi•6h ago•86 comments

Be intentional about how AI changes your codebase

https://aicode.swerdlow.dev
26•benswerd•1h ago•13 comments

EsoLang-Bench: Evaluating Genuine Reasoning in LLMs via Esoteric Languages

https://esolang-bench.vercel.app/
33•matt_d•1h ago•10 comments

Noq: n0's new QUIC implementation in Rust

https://www.iroh.computer/blog/noq-announcement
120•od0•4h ago•14 comments

Waymo Safety Impact

https://waymo.com/safety/impact/
146•xnx•2h ago•117 comments

From Oscilloscope to Wireshark: A UDP Story (2022)

https://www.mattkeeter.com/blog/2022-08-11-udp/
57•ofrzeta•3h ago•10 comments

Clockwise acquired by Salesforce and shutting down next week

https://www.getclockwise.com
41•nigelgutzmann•3h ago•22 comments

NanoGPT Slowrun: 10x Data Efficiency with Infinite Compute

https://qlabs.sh/10x
72•sdpmas•4h ago•11 comments

4Chan mocks £520k fine for UK online safety breaches

https://www.bbc.com/news/articles/c624330lg1ko
210•mosura•8h ago•330 comments

“Your frustration is the product”

https://daringfireball.net/2026/03/your_frustration_is_the_product
366•llm_nerd•11h ago•219 comments

Launch HN: Voltair (YC W26) – Drone and charging network for power utilities

41•wweissbluth•5h ago•22 comments

Scaling Karpathy's Autoresearch: What Happens When the Agent Gets a GPU Cluster

https://blog.skypilot.co/scaling-autoresearch/
98•hopechong•5h ago•42 comments

OpenBSD: PF queues break the 4 Gbps barrier

https://undeadly.org/cgi?action=article;sid=20260319125859
170•defrost•9h ago•52 comments

Juggalo makeup blocks facial recognition technology (2019)

https://consequence.net/2019/07/juggalo-makeup-facial-recognition/
212•speckx•9h ago•133 comments

An update on Steam / GOG changes for OpenTTD

https://www.openttd.org/news/2026/03/19/steam-changes-update
241•jandeboevrie•5h ago•169 comments

Tesla: Failure of the FSD's degradation detection system [pdf]

https://static.nhtsa.gov/odi/inv/2026/INOA-EA26002-10023.pdf
132•doener•2h ago•59 comments

The Need for an Independent AI Grid

https://amppublic.com/
6•olalonde•1h ago•0 comments

The Shape of Inequalities

https://www.andreinc.net/2026/03/16/the-shape-of-inequalities/
85•nomemory•8h ago•14 comments

macOS 26 breaks custom DNS settings including .internal

https://gist.github.com/adamamyl/81b78eced40feae50eae7c4f3bec1f5a
296•adamamyl•7h ago•142 comments

Xiaomi launches next-gen SU7 with 902 km range and Lidar, still undercuts Tesla

https://electrek.co/2026/03/19/xiaomi-launches-next-gen-su7-902-km-range-undercuts-tesla/
32•breve•1h ago•1 comments

Connecticut and the 1 Kilometer Effect

https://alearningaday.blog/2026/03/19/connecticut-and-the-1-kilometer-effect/
32•speckx•5h ago•24 comments

Anthropic takes legal action against OpenCode

https://github.com/anomalyco/opencode/pull/18186
315•_squared_•3h ago•265 comments

Afroman found not liable in defamation case

https://nypost.com/2026/03/18/us-news/afroman-found-not-liable-in-bizarre-ohio-defamation-case/
1057•antonymoose•13h ago•598 comments

Successes and Breakdowns in Everyday Non-Display Smart Glasses Use

https://arxiv.org/abs/2602.22340
19•PaulHoule•4d ago•1 comments

Launch HN: Canary (YC W26) – AI QA that understands your code

25•Visweshyc•6h ago•13 comments