解决欧拉最小化安装后Cockpit不能正常使用的问题

Euler操作系统最小化标准安装后，修改了hostname，发现启动提示的Cockpit Web Serivce并不能正常使用，需要解决。Cockpit对于新手观察及管理系统作用还是不小的。

虚拟机中Euler情况：
欧拉：openEuler release 23.09
内核版本：6.4.0-10.1.0.20.oe2309.x86_64
IP：192.168.133.130

SSH登陆后提示：
Authorized users only. All activities may be monitored and reported.

Authorized users only. All activities may be monitored and reported.
Web console: https://EulerVM.localdomain:9090/ or https://192.168.133.130:9090/

Last login: Tue Mar 5 12:36:26 2024 from 192.168.133.1

Welcome to 6.4.0-10.1.0.20.oe2309.x86_64

System information as of time: 2024年 03月 05日 星期二 13:47:30 CST

System load: 0.00
Processes: 159
Memory used: 9.7%
Swap used: 0%
Usage On: 23%
IP address: 192.168.133.130
IP address: 192.168.122.1
Users online: 1

但是Cockpit不能登录：

检查Cockpit相关服务：

[root@EulerVM ~]# systemctl status cockpit
○ cockpit.service - Cockpit Web Service
Loaded: loaded (/usr/lib/systemd/system/cockpit.service; static)
Active: inactive (dead)
TriggeredBy: ● cockpit.socket
Docs: man:cockpit-ws(8)

[root@EulerVM ~]# systemctl status cockpit.socket
● cockpit.socket - Cockpit Web Service Socket
Loaded: loaded (/usr/lib/systemd/system/cockpit.socket; enabled; preset: disabled)
Active: active (listening) since Tue 2024-03-05 12:36:11 CST; 1h 17min ago
Until: Tue 2024-03-05 12:36:11 CST; 1h 17min ago
Triggers: ● cockpit.service
Docs: man:cockpit-ws(8)
Listen: [::]:9090 (Stream)
Tasks: 0 (limit: 21282)
Memory: 2.0M
CGroup: /system.slice/cockpit.socket

3月 05 12:36:11 EulerVM systemd[1]: Starting Cockpit Web Service Socket…
3月 05 12:36:11 EulerVM systemd[1]: Listening on Cockpit Web Service Socket.

判断是Cockpit服务包有需要的服务没有启动，Socket已启动。或者是防火墙未打开TCP 9090端口，先从简单的开始：

[root@EulerVM ~]# firewall-cmd --permanent --add-port=9090/tcp
success
[root@EulerVM ~]# firewall-cmd --reload
success

再打开浏览器：

说明Cockpit包已正常运行。

我们再看看Cockpit包的服务状态：
[root@EulerVM ~]# systemctl status cockpit
● cockpit.service - Cockpit Web Service
Loaded: loaded (/usr/lib/systemd/system/cockpit.service; static)
Active: active (running) since Tue 2024-03-05 14:01:50 CST; 8min ago
TriggeredBy: ● cockpit.socket
Docs: man:cockpit-ws(8)
Process: 3880 ExecStartPre=/usr/libexec/cockpit-certificate-ensure --for-cockpit-tls (code=exited,>
Main PID: 3882 (cockpit-tls)
Tasks: 2 (limit: 21282)
Memory: 2.2M
CGroup: /system.slice/cockpit.service
└─3882 /usr/libexec/cockpit-tls

看来原来只是防火墙没放开端口导致Cockpit服务不能正常运行，为方便以后查看防火墙日志，我们将拒绝包计入记录：
[root@EulerVM ~]# vi /etc/firewalld/firewalld.conf
[root@EulerVM ~]# firewall-cmd --get-log-denied
off
[root@EulerVM ~]# firewall-cmd --reload
success
[root@EulerVM ~]# firewall-cmd --get-log-denied
all

可用以下命令查看防火墙拒绝的包：
dmesg --| grep -i reject

问题解决。