idea/rfc: device screen in cockpit
by Martin Polednik
Hello,
I have an idea for cockpit, but before thinking it further, I'm
interested in hearing your opinions. I am oVirt developer mostly
dealing with system stuff and this is something that could be useful
in virtualization while also providing utility for administrators
using cockpit.
The idea is about new tab/plugin (not sure of the terminology) called
'devices', that would allow access to (hardware) devices as exposed by
sysfs. The interface could be similar to 'Services' tab/plugin,
showing a list of device names created from their physical location,
similarly to libvirt's nodedev-list.
After clicking on the name, new screen would be presented, showing
additional information such as
* physical address,
* driver in use,
* special capabilities (SR-IOV numvfs and totalvfs, NPIV max_vports,
vports),
* iommu group (possibly clickable to reveal all devices in given
group),
* vendor, vendor id, product, product id.
Additionally, it makes sense to allow some basic operations:
* unbinding from host driver, binding it to specific one (useful for
local vfio-pci testing),
* reattaching it back (one use case is that
oVirt does not reattach devices automatically due to possible
issues, needs user intervention),
* setting numvfs, vports,
* ... ?
Do you find ideas above reasonable for cockpit? It is mostly in idea
phase, and builds on development and requirements of oVirt. I
personally believe that this could be useful for broader audience.
Thanks,
mpolednik
6 years, 9 months
Feature Suggestion: Send syslog to external log management tool
by Eduardo Hernacki
Hello!
Since I haven't seen another place to put it, I'd like to make a feature
suggestion in this list...
Based on the growing demand for log management and big data, I think it
would be interesting if Cockpit could provide a method to configure log
shipping to an external log management tool. It could also include Docker
and Kubernetes container logs as well...
This would avoid the need to manually configure rsyslog or another log
collector to ship syslogs.
What do you guys think?
Regards,
Eduardo Hernacki
7 years, 4 months
Cockpit weekly meeting 2016-04-25
by Andreas Nilsson
===========================================
#cockpit: Cockpit weekly meeting 2016-04-25
===========================================
Meeting started by andreasn at 13:04:09 UTC. The full logs are available
at
https://meetbot.fedoraproject.org/cockpit/2016-04-25/cockpit_weekly_meeti...
.
Meeting summary
---------------
* Agenda (andreasn, 13:04:48)
* React Playground (andreasn, 13:09:25)
* listing pattern updates (andreasn, 13:18:01)
* google summer of code (andreasn, 13:24:00)
* Open Floor (andreasn, 13:30:39)
Meeting ended at 13:38:00 UTC.
Action Items
------------
Action Items, by person
-----------------------
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* dperpeet (56)
* andreasn (29)
* larsu (18)
* zodbot (7)
* petervo (5)
* sgallagh (3)
* mulhern (1)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
7 years, 5 months
Weekly meeting 2016-04-18
by Andreas Nilsson
===========================================
#cockpit: Cockpit weekly meeting 2016-04-18
===========================================
Meeting started by andreasn at 13:01:06 UTC. The full logs are available
at
https://meetbot.fedoraproject.org/cockpit/2016-04-18/cockpit_weekly_meeti...
.
Meeting summary
---------------
* Agenda (andreasn, 13:02:20)
* list pattern (andreasn, 13:05:54)
* LINK:
https://raw.githubusercontent.com/cockpit-project/cockpit-design/master/p...
(andreasn, 13:06:49)
* removing jquery from cockpit.js (andreasn, 13:22:24)
* Patternfly update (andreasn, 13:29:07)
* Ubuntu PPA packages (andreasn, 13:31:37)
* Open Floor (andreasn, 13:37:00)
Meeting ended at 13:44:11 UTC.
Action Items
------------
Action Items, by person
-----------------------
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* stefw (56)
* dperpeet (52)
* andreasn (35)
* mvollmer (22)
* larsu (11)
* zodbot (8)
* github (4)
* mulhern (2)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
7 years, 5 months
Problem connecting on an ipa client
by Fuji San
Hello,
I have several Freeipa clients and a Freeipa server (4.2.4-1.fc23).
3 of them are causing trouble. No user can log into them either through
lightdm or via ssh from another desktop.
Here user *smith* is trying to connect to amelia from doe's account:
[doe@nina ~] $ ssh smith@amelia
smith@amelia's password:
Permission denied, please try again.
smith@amelia's password:
Permission denied, please try again.
smith@amelia's password:
packet_write_wait: Connection to UNKNOWN port 0: Broken pipe
Below are some logs when user '*smith*' is trying to log in on desktop
'amelia', one of those 3 desktops:
And user '*smith*' has no problem loging in other desktops.
User '*smith*' will eventually be able to login later today without me
doing anything to fix this.
Any idea how I can fix this problem?
Thank you
Best regards,
Fuji
----------------------------------------
# systemctl status sshd.service
● sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor
preset: enabled)
Active: active (running) since Fri 2016-04-08 08:08:30 CEST; 3 days ago
Docs: man:sshd(8)
man:sshd_config(5)
Process: 1337 ExecStart=/usr/sbin/sshd $OPTIONS (code=exited,
status=0/SUCCESS)
Main PID: 1344 (sshd)
CGroup: /system.slice/sshd.service
└─1344 /usr/sbin/sshd
Apr 11 08:27:29 amelia.opera sshd[5007]: Connection closed by 10.0.21.200
port 49700 [preauth]
Apr 11 08:51:21 amelia.opera sshd[5707]: error: AuthorizedKeysCommand
/usr/bin/sss_ssh_authorizedkeys root failed, status 1
Apr 11 08:51:21 amelia.opera sshd[5707]: error: AuthorizedKeysCommand
/usr/bin/sss_ssh_authorizedkeys root failed, status 1
Apr 11 08:51:21 amelia.opera sshd[5707]: Accepted publickey for root from
10.0.21.200 port 50798 ssh2: RSA
SHA256:kur/vJcNV6ksMFGaMzN9eqhBUMertS7cvRZqU64dMCk
Apr 11 08:52:30 amelia.opera sshd[5791]: pam_sss(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.0.21.200 user=*smith*
Apr 11 08:52:30 amelia.opera sshd[5791]: pam_sss(sshd:auth): received for
user *smith*: 4 (System error)
Apr 11 08:52:30 amelia.opera sshd[5791]: Failed password for *smith* from
10.0.21.200 port 50830 ssh2
Apr 11 09:04:26 amelia.opera sshd[6924]: pam_sss(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.0.21.200 user=*smith*
Apr 11 09:04:26 amelia.opera sshd[6924]: pam_sss(sshd:auth): received for
user *smith*: 4 (System error)
Apr 11 09:04:26 amelia.opera sshd[6924]: Failed password for *smith* from
10.0.21.200 port 51440 ssh2
Apr 11 09:05:03 amelia.opera sshd[6924]: pam_sss(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.0.21.200 user=*smith*
Apr 11 09:05:03 amelia.opera sshd[6924]: pam_sss(sshd:auth): received for
user *smith*: 4 (System error)
Apr 11 09:05:03 amelia.opera sshd[6924]: pam_reauthorize: couldn't set
permissions on kernel key: reauthorize/secret/*smith*: Permission denied
Apr 11 09:05:03 amelia.opera sshd[6924]: Failed password for *smith* from
10.0.21.200 port 51440 ssh2
----------------------------------------
in /var/log/secure:
Apr 11 08:50:54 amelia lightdm: pam_sss(lightdm:auth): authentication
failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=*smith*
Apr 11 08:50:54 amelia lightdm: pam_sss(lightdm:auth): received for user
*smith*: 4 (System error)
Apr 11 08:51:21 amelia sshd[5707]: error: AuthorizedKeysCommand
/usr/bin/sss_ssh_authorizedkeys root failed, status 1
Apr 11 08:51:21 amelia sshd[5707]: error: AuthorizedKeysCommand
/usr/bin/sss_ssh_authorizedkeys root failed, status 1
Apr 11 08:51:21 amelia sshd[5707]: Accepted publickey for root from
10.0.21.200 port 50798 ssh2: RSA
SHA256:kur/vJcNV6ksMFGaMzN9eqhBUMertS7cvRZqU64dMCk
Apr 11 08:51:21 amelia sshd[5707]: pam_unix(sshd:session): session opened
for user root by (uid=0)
Apr 11 08:52:30 amelia sshd[5791]: pam_sss(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.0.21.200 user=*smith*
Apr 11 08:52:30 amelia sshd[5791]: pam_sss(sshd:auth): received for user
*smith*: 4 (System error)
Apr 11 08:52:30 amelia sshd[5791]: Failed password for *smith* from
10.0.21.200 port 50830 ssh2
Apr 11 08:55:02 amelia systemd: pam_unix(systemd-user:session): session
opened for user pcp by (uid=0)
----------------------------------------
in /var/log/message:
Apr 11 08:52:27 amelia audit: CRYPTO_KEY_USER pid=5792 uid=0
auid=4294967295 ses=4294967295 msg='op=destroy kind=server
fp=SHA256:3c:91:77:85:c3:d9:70:e2:de:f1:d6:8d:f6:7d:c3:0c:f8:1b:33:70:79:c0:56:55:8c:7e:09:79:ba:c2:8b:a4
direction=?
spid=5792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.0.21.200
terminal=? res=success'
Apr 11 08:52:27 amelia audit: CRYPTO_KEY_USER pid=5792 uid=0
auid=4294967295 ses=4294967295 msg='op=destroy kind=server
fp=SHA256:92:c4:7d:59:e2:e5:56:47:d1:7c:e9:2a:f9:d6:45:9e:5d:90:7c:59:2c:28:6f:32:1d:88:8e:25:cc:3c:44:a7
direction=?
spid=5792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.0.21.200
terminal=? res=success'
Apr 11 08:52:27 amelia audit: CRYPTO_KEY_USER pid=5792 uid=0
auid=4294967295 ses=4294967295 msg='op=destroy kind=server
fp=SHA256:fb:2b:9b:15:d6:87:b7:d9:f3:05:19:a4:56:ce:13:e4:88:44:03:90:94:4c:e7:2c:28:81:60:b5:f2:e1:2e:be
direction=?
spid=5792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.0.21.200
terminal=? res=success'
Apr 11 08:52:27 amelia audit: CRYPTO_SESSION pid=5791 uid=0 auid=4294967295
ses=4294967295 msg='op=start direction=from-server cipher=
chacha20-poly1305(a)openssh.com ksize=512 mac=<implicit> pfs=
curve25519-sha256(a)libssh.org spid=5792 suid=
74 rport=50830 laddr=10.0.21.210 lport=22 exe="/usr/sbin/sshd" hostname=?
addr=10.0.21.200 terminal=? res=success'
Apr 11 08:52:27 amelia audit: CRYPTO_SESSION pid=5791 uid=0 auid=4294967295
ses=4294967295 msg='op=start direction=from-client cipher=
chacha20-poly1305(a)openssh.com ksize=512 mac=<implicit> pfs=
curve25519-sha256(a)libssh.org spid=5792 suid=
74 rport=50830 laddr=10.0.21.210 lport=22 exe="/usr/sbin/sshd" hostname=?
addr=10.0.21.200 terminal=? res=success'
Apr 11 08:52:27 amelia audit: USER_AUTH pid=5791 uid=0 auid=4294967295
ses=4294967295 msg='op=pubkey acct="*smith*" exe="/usr/sbin/sshd"
hostname=? addr=10.0.21.200 terminal=ssh res=failed'
Apr 11 08:52:30 amelia [sssd[krb5_child[5795]]]: Error constructing AP-REQ
armor: Ticket not yet valid
Apr 11 08:52:30 amelia [sssd[krb5_child[5795]]]: Error constructing AP-REQ
armor: Ticket not yet valid
Apr 11 08:52:30 amelia audit: USER_AUTH pid=5791 uid=0 auid=4294967295
ses=4294967295 msg='op=PAM:authentication grantors=? acct="*smith*"
exe="/usr/sbin/sshd" hostname=10.0.21.200 addr=10.0.21.200 terminal=ssh
res=failed'
Apr 11 08:52:30 amelia audit: USER_AUTH pid=5791 uid=0 auid=4294967295
ses=4294967295 msg='op=password acct="*smith*" exe="/usr/sbin/sshd"
hostname=? addr=10.0.21.200 terminal=ssh res=failed'
7 years, 5 months
Weekly meeting 2015-04-04
by Andreas Nilsson
===========================================
#cockpit: Cockpit weekly meeting 2016-04-04
===========================================
Meeting started by andreasn at 13:01:47 UTC. The full logs are available
at
https://meetbot.fedoraproject.org/cockpit/2016-04-04/cockpit_weekly_meeti...
.
Meeting summary
---------------
* agenda (andreasn, 13:01:53)
* Storage RAID (andreasn, 13:05:50)
* Docker storage setup implementation (andreasn, 13:15:35)
* LINK: https://lists.projectatomic.io/mailman/listinfo/atomic-devel
(stefw, 13:31:18)
* Open Floor (andreasn, 13:32:43)
Meeting ended at 13:37:11 UTC.
Action Items
------------
Action Items, by person
-----------------------
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* mvollmer (61)
* dperpeet (28)
* stefw (28)
* andreasn (25)
* zodbot (7)
* larsu (3)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
7 years, 5 months