Fedora 26 Minimal includes Cockpit

Romo

@stacksofplates said in Fedora 26 Minimal includes Cockpit:

@stacksofplates said in Fedora 26 Minimal includes Cockpit:
@travisdh1 said in Fedora 26 Minimal includes Cockpit:

@stacksofplates said in Fedora 26 Minimal includes Cockpit:

@JaredBusch said in Fedora 26 Minimal includes Cockpit:

@stacksofplates said in Fedora 26 Minimal includes Cockpit:

I've been using virt-builder to build images. Disk is only 6GB. 99% sure cockpit isn't installed.

All I know is I downloaded the net image and chose the minimal install.

Maybe it is buggy. It is alpha.

Ya the virt-builder images are GPG signed and prebuilt for KVM. They have the QEMU guest agent installed and will generate a random root password each time you create a disk. I haven't grabbed a server image from the Fedora site in a while.

Do you remember where you found that guest image? I'd like to spin some up.

Edit: I think I found a source: https://docs.openstack.org/image-guide/obtain-images.html

It pulls them in automatically. Just run virt-builder fedora-25 and add whatever options after. I usually just do something like this:
virt-builder fedora-25 --format qcow2 --hostname changeme --run-command 'useradd ansible && echo "ansible     ALL=(ALL)  NOPASSWD:ALL" > /etc/sudoers.d/ansible' --install '<package that I can't remember right now>' --selinux-relabel
Once it's done building I create the VM using that disk and let it spin up, and then shut it down. Then I run:
virt-sysprep -a template.qcow2 --ssh-inject ansible:file:/path/to/pub_key
Then I can just clone it and apply all of my policies with Ansible.
Looked when I got home. The package I couldn't remember is python, libselinux-python, and qemu-guest-agent. The image also doesnt have tar or unzip installed.

I lied about the guest agent. It's not installed by default but the console is available through ttyS0 by default which is nice.

@stacksofplates Why inject the ssh-keys with virt-sysprep and not directly with virt-builder?

I am getting locale errors when using vms created with virt-builder any idea how to fix this?

stacksofplates

@Romo said in Fedora 26 Minimal includes Cockpit:

@stacksofplates said in Fedora 26 Minimal includes Cockpit:
@stacksofplates said in Fedora 26 Minimal includes Cockpit:
@travisdh1 said in Fedora 26 Minimal includes Cockpit:

@stacksofplates said in Fedora 26 Minimal includes Cockpit:

@JaredBusch said in Fedora 26 Minimal includes Cockpit:

@stacksofplates said in Fedora 26 Minimal includes Cockpit:

I've been using virt-builder to build images. Disk is only 6GB. 99% sure cockpit isn't installed.

All I know is I downloaded the net image and chose the minimal install.

Maybe it is buggy. It is alpha.

Ya the virt-builder images are GPG signed and prebuilt for KVM. They have the QEMU guest agent installed and will generate a random root password each time you create a disk. I haven't grabbed a server image from the Fedora site in a while.

Do you remember where you found that guest image? I'd like to spin some up.

Edit: I think I found a source: https://docs.openstack.org/image-guide/obtain-images.html

It pulls them in automatically. Just run virt-builder fedora-25 and add whatever options after. I usually just do something like this:
virt-builder fedora-25 --format qcow2 --hostname changeme --run-command 'useradd ansible && echo "ansible     ALL=(ALL)  NOPASSWD:ALL" > /etc/sudoers.d/ansible' --install '<package that I can't remember right now>' --selinux-relabel
Once it's done building I create the VM using that disk and let it spin up, and then shut it down. Then I run:
virt-sysprep -a template.qcow2 --ssh-inject ansible:file:/path/to/pub_key
Then I can just clone it and apply all of my policies with Ansible.
Looked when I got home. The package I couldn't remember is python, libselinux-python, and qemu-guest-agent. The image also doesnt have tar or unzip installed.

I lied about the guest agent. It's not installed by default but the console is available through ttyS0 by default which is nice.
@stacksofplates Why inject the ssh-keys with virt-sysprep and not directly with virt-builder?

I am getting locale errors when using vms created with virt-builder any idea how to fix this?

The ansible user isn't in there yet until you spin up the VM so I have to inject it afterward. If I was just using root it would work.

I logged into the console once and I did notice that but it doesn't seem to affect anything. I haven't used the console since then. I think it sets that to the default locale but it isn't there. I don't think it will cause any issues, but I could be wrong.

black3dynamite

@stacksofplates
not sure about unzip but tar is also not installed on the minimal install too.

Obsolesce

Yeah I tried Fedora 26 Beta (minimal install via netinst) and Cockpit is up and running by default.

It's supposed to be like that by default according to these two sites:

http://fedoraproject.org/wiki/Changes/CockpitManagementConsole#Summary

http://cockpit-project.org/running.html

I think it's rather handy, and it seems easier to turn it off if it's not needed, than to turn it on if it is.

JaredBusch

@Tim_G yeah, I had no objection to it running in a minimal install, but it was surprising to see.

scottalanmiller

@Tim_G said in Fedora 26 Minimal includes Cockpit:

Yeah I tried Fedora 26 Beta (minimal install via netinst) and Cockpit is up and running by default.

It's supposed to be like that by default according to these two sites:

http://fedoraproject.org/wiki/Changes/CockpitManagementConsole#Summary

http://cockpit-project.org/running.html

I think it's rather handy, and it seems easier to turn it off if it's not needed, than to turn it on if it is.

I like it in non-DevOp scenarios. It's basically the same security profile as SSH, so no real concerns when SSH is also exposed.

Obsolesce

@scottalanmiller said in Fedora 26 Minimal includes Cockpit:

@Tim_G said in Fedora 26 Minimal includes Cockpit:

Yeah I tried Fedora 26 Beta (minimal install via netinst) and Cockpit is up and running by default.

It's supposed to be like that by default according to these two sites:

http://fedoraproject.org/wiki/Changes/CockpitManagementConsole#Summary

http://cockpit-project.org/running.html

I think it's rather handy, and it seems easier to turn it off if it's not needed, than to turn it on if it is.

I like it in non-DevOp scenarios. It's basically the same security profile as SSH, so no real concerns when SSH is also exposed.

Yup. Only thing I'd change, is the ability to use your own SSL cert during the install.

They could stick that button under the set password button.

Obsolesce

Just did a minimal install... no working Cockpit upon first boot. Gonna try again. (this was from Netinst.iso)

matteo nunziati

@JaredBusch said in Fedora 26 Minimal includes Cockpit:

@Tim_G yeah, I had no objection to it running in a minimal install, but it was surprising to see.

recently the ovirt project uses such a package set to create a virt node. something minimal a la hyper-v but with https interface.

maybe this is just the testbed for ovirt nodes, which, in turn, become the RHEV nodes.

Obsolesce

@matteo-nunziati said in Fedora 26 Minimal includes Cockpit:

@JaredBusch said in Fedora 26 Minimal includes Cockpit:

@Tim_G yeah, I had no objection to it running in a minimal install, but it was surprising to see.

recently the ovirt project uses such a package set to create a virt node. something minimal a la hyper-v but with https interface.

maybe this is just the testbed for ovirt nodes, which, in turn, become the RHEV nodes.

They changed something, I did a test install just a few days ago and it was running at first boot.

I had to go through the steps to install it and everything, like add to startup and open the firewall.

In the full .ISO... the 2.8GB version (or whatever it is) it's there and working. Not on a minimal install off the netinst ISO.

Obsolesce

I just did a side-by-side install comparison. Here are the results. The details are in the screenshots: (no Cockpit in minimal install, twice as many packages in basic)