X-Git-Url: https://piware.de/gitweb/?p=talk-cockpit-auth-anywhere.git;a=blobdiff_plain;f=cockpit-auth-anywhere.md;h=59b2c152fc8efd94f59893307433c744661071c4;hp=bc8783d7f8c4e8b4e86425826f6c7f29e0bff1af;hb=c277c4ac238af5f48c6f43989dbaf427c63bb063;hpb=e52f6b0fe3eaa8638c13d482f20a2e4c7c98e4a4 diff --git a/cockpit-auth-anywhere.md b/cockpit-auth-anywhere.md index bc8783d..59b2c15 100644 --- a/cockpit-auth-anywhere.md +++ b/cockpit-auth-anywhere.md @@ -17,8 +17,7 @@ header-includes: :::notes - Conceptually: Linux session running in a web browser; technically very similar to ssh/VT/GNOME login -- Aimed at admins who are new to Linux, e. g. coming from the Windows world and familiar with the concepts, but not Linux terminology -- but also to experienced ones for infrequent tasks; not just setup, but also investigating “what is wrong with this machine” +- Tool for experimenting, learning, troubleshooting, and doing infrequent tasks ::: @@ -47,6 +46,8 @@ resize2fs /dev/vg0/data1 - Zero configuration :::notes +- being web based makes this server UI available to places that you + traditionally don't reach with ssh - Switch to Windows virt-viewer, open Edge, show Cockpit - Quit virt-viewer - Move to local browser, enable mobile mode (Ctrl+Shift+M) @@ -134,6 +135,7 @@ RequireHost=true - can run in container - no ws on critical machines, don't trust cockpit-session - switch to browser; log out, use "connect to" for cockpit.dev:2201 +- finish the demo script, press Enter ::: # Other authentication setups @@ -143,8 +145,6 @@ RequireHost=true - OAuth (external embedding) - Foreman: included cockpit-ws with dynamic configuration -TODO: foreman screenshot - :::notes - Cockpit supports common authentication systems out of the box - IdM is very common; if you have a krb ticket, you get a session immediately @@ -153,6 +153,7 @@ TODO: foreman screenshot present them to the web server; latest Cockpit versions supports that - Foreman has a "Web Console" button; interesting case for seamless transition between Foreman and Cockpit +- Show video - already has ssh to all maintained machines - runs a single cockpit-ws process on its server, and dynamically configures it for selected target machine