Red Hat System Administration I
Abstract
| Goal |
Investigate and resolve issues in the web-based management interface, getting support from Red Hat to help solve problems. |
| Objectives |
|
| Sections |
|
Activate the web console management interface to remotely manage and monitor the performance of a Red Hat Enterprise Linux server.
The web console is a web-based management interface for Red Hat Enterprise Linux. The interface is designed for managing and monitoring your servers, and is based on the open-source Cockpit service.
You can use the web console to monitor system logs and to view graphs of system performance. Additionally, you can use your web browser to change settings by using graphical tools in the web console interface, including a fully functional interactive terminal session.
Starting from Red Hat Enterprise Linux 7, the web console is installed by default in all installation variants except in a minimal installation. You can use the following command to install the web console:
[root@host ~]# dnf install cockpitThen, enable and start the cockpit.socket service, which runs a web server. This step is necessary if you need to connect to the system through the web interface.
[root@host ~]# systemctl enable --now cockpit.socket
Created symlink /etc/systemd/system/sockets.target.wants/cockpit.socket -> /usr/lib/systemd/system/cockpit.socket.If you are using a custom firewall profile, then you must add the cockpit service to firewalld to open port 9090 in the firewall:
[root@host ~]#firewall-cmd --add-service=cockpit --permanentsuccess [root@host ~]#firewall-cmd --reloadsuccess
The web console provides its own web server. Launch your web browser to log in to the web console.
Open https://servername:9090 in your web browser, where servername is the hostname or IP address of your server. The web console protects the connection by a Transport Layer Security (TLS) session. By default, the cockpit service installs the web console with a self-signed TLS certificate. When you connect to the web console for the first time, the web browser probably displays a security warning. The cockpit-ws(8) man page provides instructions on how to replace the TLS certificate with a correctly signed one.
To log in to the web console, enter your username and password at the login screen. You can log in with the username and password of any local account on the system, including the root user.
Click .
After you log in, the web console displays the username on the left side of the title bar. The default access to the web console is with limited rights, as you can see in the following button and in the "Web console is running in limited access mode" message.
If your account is configured with the appropriate privileges, then you can escalate privileges by switching to administrative access, by clicking the or buttons. During the escalation privileges process, you need to enter your password. When you have escalated privileges, the button changes to .
You can switch back to limited access mode by clicking the button and then clicking the button in the pop-up window that it shows.
You can change your own password when logged in to the web console. Click the button on the navigation bar. Click your account label to open the account details page.
As a non-privileged user, you are restricted to setting or resetting your password and managing public SSH keys. To set or reset your password, click the button.
Enter your information in the , , and fields. Click the button to activate the new password.
The web console is a powerful troubleshooting tool. You can monitor system statistics in real time, inspect system logs, and switch to a terminal session within the web console to gather additional information from the command-line interface.
Click the button on the navigation bar to view information about the system, such as its type of hardware, operating system, hostname, and more. If you log in as a non-privileged user, then you can see all the information but not modify any value. The following image displays the page.
Click on the page to view details of current system performance for CPU activity, memory use, disk I/O, and network usage.
The section in the navigation bar provides access to analysis tools for the system logs. You can use the scroll menus on the page to filter log messages by a logging date range, or priority, or both. The web console uses the current date as the default; you can click the date menu and specify any range of dates. Similarly, the menu provides options that range from (at the lowest level) to more specific severity conditions such as or .
Click a row to view details of the log report. In the following example, note the first row that reports on a sudo log message.
The following example shows the details that the web console displays when you click the sudo row. Details of the report include the selected log entry (sudo), the date, time, priority, and syslog facility of the log entry, and the hostname of the system that reported the log message.
The button in the navigation bar provides access to a fully functional terminal session within the web console interface. In this web console terminal, you can run arbitrary commands to manage and work with the system, and for tasks that the other web console tools do not support.
The following image displays examples of commands to gather additional information. For example, listing the contents of the /var/log directory provides reminders of log files that might have valuable information. The id command provides information such as group membership that might help to troubleshoot file access restrictions. The ps au command provides a view of processes that are running in the terminal and of the user that is associated with the process.
A diagnostic report is a collection of configuration details, system information, and diagnostic information from a Red Hat Enterprise Linux system. Data that is collected in the report includes system logs and debug information that you can use to troubleshoot issues.
To generate a diagnostic report, log in to the web console as a privileged user. Click the button on the navigation bar to open the page that creates these reports. Click the button to generate a new diagnostic report.
After some minutes, the interface displays when the report is complete. Click the button to save the report to your local system.
Click and complete the process.
As a privileged web console user, you can stop, start, enable, and restart system services. Additionally, you can configure network interfaces, configure firewall services, administer user accounts, and more.
In the web console, you can restart or shut down the system. To access the system power options, log in to the web console as a privileged user. Click the button on the navigation bar to access system power options.
From the menu on the upper right, select the appropriate option to either reboot or shut down a system.
You can start, enable, disable, and stop services with graphical tools in the web console. To do so, click the button on the navigation bar to access the web console's services initial page. The page shows the system services tab by default. You can change to or by clicking the appropriate tab. Use the search bar or scroll through the page to select the service to manage.
In the following example, select the atd.service row to open the service management page.
Click the , , or buttons as appropriate to manage the service. In this view, the service is already running. To view additional information about the service, click any of the highlighted links or scroll through the service logs that are displayed below the service management section.
To manage firewall rules and network interfaces, click the button on the navigation bar. The following example shows how to gather information about network interfaces and how to manage them.
Click the appropriate interface name in the section to access the management page. In this example, the eth0 interface is selected. The top part of the management page displays network traffic activity for the selected device. Scroll down to view configuration settings and management options.
To modify or add configuration options in an interface, click the highlighted links for the wanted configuration. In this example, the link shows a single IP address and netmask, 172.25.250.9/24 for the eth0 network interface. To add an IP address to the eth0 network interface, click the link.
Click the symbol on the right side of the list selection to add an IP address. Enter an IP address and network mask in the appropriate fields. Click to activate the new settings.
The display automatically switches back to the interface's management page where you can confirm the new IP address.
As a privileged user, you can create user accounts in the web console. Click on the navigation bar to view existing accounts. Click to open the account management page.
Enter the information for the new account and then click .
The display automatically reverts to the account management page, where you can confirm the new user account.
References
cockpit(1), cockpit-ws(8), and cockpit.conf(5) man pages
For more information, refer to Managing Systems Using the RHEL 9 Web Console at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/managing_systems_using_the_rhel_9_web_console/index#getting-started-with-the-rhel-9-web-console_managing-systems-using-the-web-console























