Install Cockpit on Debian 13 trixie

edafe.de/cockpit Cockpit provides an easy-to-use, web-based interface for administering Linux systems. It simplifies tasks such as monitoring logs, controlling system services, configuring networks, and managing virtual machines. Cockpit has been described as a “useful and extensible tool to observe, manage, and troubleshoot Linux servers“. Step 1 cockpit requires the use of the firewalld service to be able to make changes to your firewall rules. If you are using ufw as a host-based firewall Remove ufw before replacing it with firewalld. $ sudo apt-get remove --purge --yes ufw[sudo] password for yourusername: Install firewalld as a host-based firewall Install firewalld and maintain ssh access as well as enabling cockpit to receive incoming connections. $ sudo -- bash -c 'apt-get install --show-progress --yes firewalld && systemctl enable --now firewalld.service && firewall-cmd --zone=public --add-service=ssh --permanent && firewall-cmd --zone=public --add-service=cockpit --permanent && firewall-cmd --reload && firewall-cmd --info-zone=public' Step 2 Proceed to install cockpit and selected add-on applications. $ sudo apt-get install --show-progress --yes cockpit cockpit-bridge cockpit-machines cockpit-podman nullmailer ssh tuned-utils Step 3 If you selected a wireless interface as the primary network interface for use during installation of the Debian system, you may need to re-establish connection to the wireless network after rebooting. Enable NetworkManager for the primary network interface and reboot your system. $ sudo sed -i 's/managed=false/managed=true/' /etc/NetworkManager/NetworkManager.conf&&sudo sed -i '/# The primary network interface/,$d' /etc/network/interfaces && sudo reboot Step 4 Access the Cockpit web console on https://localhost:9090 by entering your username and password. Step 5 By default, the Cockpit web console listens on port 9090 for connections. If you want to make changes from the default, use the following command to edit /etc/systemd/system/cockpit.socket.d/override.conf. $ sudo systemctl edit cockpit.socket The example below changes the web console port from 9090 to 9091 and restricts access to the localhost only. ### Editing /etc/systemd/system/cockpit.socket.d/override.conf### Anything between here and the comment below will become the new contents of the file[Socket]ListenStream=ListenStream=127.0.0.1:9091### Edits below this comment will be discarded Use the following command for your changes to take effect. $ sudo -- bash -c 'systemctl daemon-reload && systemctl restart cockpit.socket && systemctl status cockpit.socket'