http://cockpit-project.org/blog/cockpit-127.html
Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 126 and 127
Show security scan information about container images -----------------------------------------------------
Lars did work to show security scan information about container images. The displayed scans happen via the atomic scan [1] tools and the data comes from the OpenSCAP [2] system. Take a look at the video below.
Demo: https://www.youtube.com/watch?v=zANUkEmfaAk
Change: https://github.com/cockpit-project/cockpit/pull/4952 https://github.com/cockpit-project/cockpit/pull/5259 https://github.com/cockpit-project/cockpit/pull/5686
[1] https://developers.redhat.com/blog/2016/05/02/introducing-atomic-scan-contai...
[2] https://www.open-scap.org/
Choose whether password is cached and reused on the login screen ----------------------------------------------------------------
The typical workflow for peforming privileged tasks on a Linux system is to log in as a non-root user and then use sudo or Polkit to escalate privileges.
Stef did work to make Cockpit's privilege escalation reflect this properly. Cockpit now has an option on the login screen to "Reuse my password for privileged tasks". Checking this option automatically performs reuses the login password as necessary to escalate privileges. If you leave this box unchecked then Cockpit will behave exactly as a normal user login without special privileges.
In the future we'll have a way to enable this option once logged in, and retype your password inside of the logged in session.
Demo: https://www.youtube.com/watch?v=TW6UsPbNkV4
Change: https://github.com/cockpit-project/cockpit/pull/5522
The remotectl command can now combine certificate and key files ---------------------------------------------------------------
Peter did work to make it easier to use TLS certificate and key files with Cockpit for port 9090. Normally the server certificate(s) and key need to be combined into a single file and placed into the /etc/cockpit/ws-certs.d directory. The remotectl command that comes with Cockpit can now be used to build such a combined file.
Due to this, when Cockpit is deployed as an Openshift Pod it can use certificates provided by Openshift.
Docs: man remotectl
Change: https://github.com/cockpit-project/cockpit/pull/5525
Cockpit respects /etc/shells ----------------------------
Martin fixed Cockpit so it only allows the user to log in if the user has a valid shell listed in /etc/shells. In addition bugs on Ubuntu and Debian have been fixed where users were created without valid shells.
Change: https://github.com/cockpit-project/cockpit/pull/5665
Allow renaming of active devices in networking interface --------------------------------------------------------
You can now rename network devices like bonds or bridges while they're active. The change will apply immediately and without any interruption in service.
Change: https://github.com/cockpit-project/cockpit/pull/5570
Rename cockpit-shell to cockpit-system --------------------------------------
The cockpit-shell subpackage has been renamed to cockpit-system to better reflect its focus: configuring and troubleshooting the local system.
Change: https://github.com/cockpit-project/cockpit/pull/5600
Kerberos authentication now work even if gss-proxy is in use ------------------------------------------------------------
Sometimes Kerberos (or GSSAPI) single-sign-on authentication requires multiple round trips to the server. Cockpit now supports this properly, and the end result is that SSO works even when fancy things like GSS-Proxy [3] are in use.
Change: https://github.com/cockpit-project/cockpit/pull/5495
[3] https://fedorahosted.org/gss-proxy/
Get it ------
You can get Cockpit here:
http://cockpit-project.org/running.html
Cockpit 127 is available in Fedora 25:
https://bodhi.fedoraproject.org/updates/cockpit-127-1.fc25
Or download the tarball here:
https://github.com/cockpit-project/cockpit/releases/tag/127
Take care,
Stef