{"id":2198,"date":"2026-07-04T18:46:47","date_gmt":"2026-07-04T18:46:47","guid":{"rendered":"https:\/\/alexisiumus.ru\/?p=2198"},"modified":"2026-07-05T16:18:54","modified_gmt":"2026-07-05T16:18:54","slug":"%d1%83%d1%81%d1%82%d0%b0%d0%bd%d0%be%d0%b2%d0%ba%d0%b0-cockpit-%d0%bd%d0%b0-debian-13","status":"publish","type":"post","link":"https:\/\/alexisiumus.ru\/?p=2198","title":{"rendered":"\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Cockpit \u043d\u0430 Debian 13"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 <strong>Cockpit<\/strong> \u043d\u0430 <strong>Debian 13 (Trixie)<\/strong> \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u043d\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438) \u043d\u0443\u0436\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c firewall. \u041d\u0438\u0436\u0435 \u2014 \u043f\u043e\u043b\u043d\u044b\u0439, \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u044b\u0439, \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u0432\u043e\u0439 \u0441\u0442\u0438\u043b\u044c \u0440\u0430\u0431\u043e\u0442\u044b.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udda5\ufe0f \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Cockpit \u043d\u0430 Debian 13 <\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>1) \u041e\u0431\u043d\u043e\u0432\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update &amp;&amp; sudo apt upgrade -y<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>2) \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438 Cockpit <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Debian 13 \u0443\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u0430\u043a\u0435\u0442 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit -y<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>3) \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 Cockpit <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit-pcp cockpit-networkmanager cockpit-storaged cockpit-packagekit -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0448\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit-machines qemu-system libvirt-daemon-system libvirt-clients -y\nsudo systemctl enable --now libvirtd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0448\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install cockpit-podman podman -y<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udd10 4) \u0420\u0430\u0437\u0440\u0435\u0448\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431\u2011\u043f\u0430\u043d\u0435\u043b\u0438 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u0441\u043b\u0443\u0448\u0430\u0435\u0442 \u043f\u043e\u0440\u0442 <strong>9090<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0443 \u0442\u0435\u0431\u044f \u0432\u043a\u043b\u044e\u0447\u0451\u043d UFW:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 9090\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f firewalld:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-cmd --add-service=cockpit --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\ude80 5) \u0417\u0430\u043f\u0443\u0441\u0442\u0438 Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 systemd socket activation, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, \u043d\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl status cockpit.socket<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041e\u0442\u043a\u0440\u043e\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;&lt;IP_\u0441\u0435\u0440\u0432\u0435\u0440\u0430&gt;:9090<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0412\u0445\u043e\u0434 \u2014 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 sudo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udce6 6) (\u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e) \u0412\u043a\u043b\u044e\u0447\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 PCP <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u0434\u0430\u0441\u0442 \u0433\u0440\u0430\u0444\u0438\u043a\u0438 CPU, RAM, IO, \u0441\u0435\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl enable --now pcp<\/code><\/pre>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u0414\u043b\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0442\u044c..<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u041a\u043e\u0440\u043e\u0442\u043a\u043e:<\/strong> \u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e <strong>libvirt default network \u043d\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430<\/strong>, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0447\u0435\u0440\u0435\u0437 Cockpit\/libvirt \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e. \u041d\u0430 Proxmox \u044d\u0442\u043e \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e <strong>PVE \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 libvirt<\/strong>, \u0438 \u0435\u0433\u043e default\u2011\u0441\u0435\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udee0\ufe0f \u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Libvirt \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c <code>default<\/code>, \u043d\u043e:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u043e\u043d\u0430 <strong>\u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0430<\/strong>,<\/li>\n\n\n\n<li>\u043e\u043d\u0430 <strong>\u043d\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0430<\/strong> (\u0447\u0430\u0441\u0442\u043e \u043d\u0430 Proxmox),<\/li>\n\n\n\n<li>\u0438\u043b\u0438 libvirt \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e Proxmox \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 <code>pvedaemon<\/code> \u0438 <code>qemu-server<\/code>, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 libvirt.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udfe2 \u0420\u0435\u0448\u0435\u043d\u0438\u0435 (\u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c libvirt \u0432 Cockpit) <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0439 \u0441\u0435\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo virsh net-start default\nsudo virsh net-autostart default<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0415\u0441\u043b\u0438 \u0441\u0435\u0442\u0438 \u043d\u0435\u0442 \u2014 \u0441\u043e\u0437\u0434\u0430\u0439 \u0435\u0451:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo virsh net-define \/usr\/share\/libvirt\/networks\/default.xml\nsudo virsh net-start default\nsudo virsh net-autostart default<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udd34 \u0412\u0430\u0436\u043d\u043e \u0434\u043b\u044f Proxmox <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u0430 Proxmox VE:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>libvirt <strong>\u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f<\/strong> \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u043a,<\/li>\n\n\n\n<li>Cockpit\u2011\u043c\u043e\u0434\u0443\u043b\u044c <code>cockpit-machines<\/code> <strong>\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 Proxmox VM<\/strong>,<\/li>\n\n\n\n<li>\u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c VM \u0447\u0435\u0440\u0435\u0437 Cockpit \u2192 \u043e\u0448\u0438\u0431\u043a\u0438 libvirt.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0422\u043e \u0435\u0441\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0430 <strong>\u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u0430\u044f<\/strong>, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0442\u044b \u043f\u044b\u0442\u0430\u0435\u0448\u044c\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c libvirt \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0433\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f Proxmox.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u0415\u0449\u0451 \u043d\u044e\u0430\u043d\u0441<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u043d\u044f\u043b, Alex \u2014 \u0442\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b Cockpit <strong>\u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443<\/strong>, \u0430 \u043d\u0435 \u043d\u0430 Proxmox\u2011\u0445\u043e\u0441\u0442. \u042d\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0435\u043d\u044f\u0435\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0443: <strong>libvirt \u043d\u0430 \u043e\u0431\u044b\u0447\u043d\u043e\u043c Debian\/Ubuntu \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e<\/strong>, \u043d\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u2014 <strong>AppArmor \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f QEMU \u043a ISO \u0432 \u0442\u0432\u043e\u0451\u043c \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0421\u0435\u0442\u044c <code>default<\/code> \u0443 \u0442\u0435\u0431\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430, \u0432\u0441\u0451 \u043e\u043a:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>default   active   yes   yes<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u043e VM \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e QEMU \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c ISO \u0438\u0437 <code>\/home\/alex\/images\/<\/code>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\udde9 \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0414\u0430\u0436\u0435 \u043d\u0430 \u043e\u0431\u044b\u0447\u043d\u043e\u043c Debian:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>libvirt \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 QEMU \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c AppArmor<\/li>\n\n\n\n<li>AppArmor <strong>\u0437\u0430\u043f\u0440\u0435\u0449\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \/home\/<\/strong><\/li>\n\n\n\n<li>QEMU \u043c\u043e\u0436\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c ISO <strong>\u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439<\/strong>, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440:\n<ul class=\"wp-block-list\">\n<li><code>\/var\/lib\/libvirt\/images\/<\/code><\/li>\n\n\n\n<li><code>\/var\/lib\/libvirt\/boot\/<\/code><\/li>\n\n\n\n<li><code>\/var\/lib\/libvirt\/filesystems\/<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u2192 libvirt \u2192 QEMU \u2192 AppArmor \u2192 <strong>Permission denied<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udfe2 \u0420\u0435\u0448\u0435\u043d\u0438\u0435: \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438 ISO \u0432 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 <\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>1) \u0421\u043e\u0437\u0434\u0430\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 (\u0435\u0441\u043b\u0438 \u043d\u0435\u0442) <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo mkdir -p \/var\/lib\/libvirt\/images<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>2) \u041f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438 ISO <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo cp \/home\/alex\/images\/debian-13.5.0-amd64-netinst.iso \/var\/lib\/libvirt\/images\/<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>3) \u0414\u0430\u0439 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chown libvirt-qemu:libvirt-qemu \/var\/lib\/libvirt\/images\/debian-13.5.0-amd64-netinst.iso<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>4) \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \/var\/lib\/libvirt\/images\/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e Cockpit \u0441\u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c VM.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\udde9 \u041f\u043e\u0447\u0435\u043c\u0443 Cockpit \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c ISO \u0438\u0437 \/home <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e AppArmor \u043f\u0440\u043e\u0444\u0438\u043b\u0438 libvirt \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u043e:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>deny \/home\/** r,<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b QEMU \u043d\u0435 \u043c\u043e\u0433 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udfe3 \u0415\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0448\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c AppArmor \u0434\u043b\u044f libvirt (\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e) <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041c\u043e\u0436\u043d\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0432 complain\u2011mode:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo aa-complain \/etc\/apparmor.d\/usr.sbin.libvirtd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u043e \u043b\u0443\u0447\u0448\u0435 <strong>\u043d\u0435 \u0442\u0440\u043e\u0433\u0430\u0442\u044c AppArmor<\/strong>, \u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udfe2 \u0418\u0442\u043e\u0433 <\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cockpit \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e.<\/li>\n\n\n\n<li>\u0421\u0435\u0442\u044c <code>default<\/code> \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u2014 \u0432\u0441\u0451 \u0445\u043e\u0440\u043e\u0448\u043e.<\/li>\n\n\n\n<li>\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 <strong>AppArmor \u2192 ISO \u0432 \/home \u2192 Permission denied<\/strong>.<\/li>\n\n\n\n<li>\u041f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438 ISO \u0432 <code>\/var\/lib\/libvirt\/images\/<\/code> \u2192 VM \u0441\u043e\u0437\u0434\u0430\u0441\u0442\u0441\u044f.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span><mark style=\"background-color:#fcb900\" class=\"has-inline-color\">\u0415\u0441\u043b\u0438 Cockpit \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0432\u0435\u0440\u0441-\u043f\u0440\u043e\u043a\u0441\u0438, \u0432\u0430\u0436\u043d\u043e \u0443\u0447\u0435\u0441\u0442\u044c \u043e\u0434\u0438\u043d \u043c\u043e\u043c\u0435\u043d\u0442<\/mark> <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0432\u044b\u0432\u043e\u0434: <strong>\u0443 \u0442\u0435\u0431\u044f \u0432\u043a\u043b\u044e\u0447\u0451\u043d cockpit-tls<\/strong>, \u0438 \u044d\u0442\u043e <em>\u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e<\/em> \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0447\u0435\u0440\u0435\u0437 Apache reverse proxy. Cockpit \u0432 \u0442\u0432\u043e\u0435\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 <strong>\u0441\u0430\u043c \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442 HTTPS<\/strong>, \u0445\u043e\u0442\u044f \u0442\u044b \u0443\u0436\u0435 \u0437\u0430\u0432\u0435\u0440\u043d\u0443\u043b \u0435\u0433\u043e \u0432 HTTPS \u0447\u0435\u0440\u0435\u0437 Apache. \u0412 \u0438\u0442\u043e\u0433\u0435:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u2192 Apache (HTTPS)<\/li>\n\n\n\n<li>Apache \u2192 Cockpit (HTTP)<\/li>\n\n\n\n<li>Cockpit \u0432\u0438\u0434\u0438\u0442 HTTP \u2192 \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0430 HTTPS<\/li>\n\n\n\n<li>Apache \u2192 \u0441\u043d\u043e\u0432\u0430 HTTP \u2192 Cockpit \u2192 \u0441\u043d\u043e\u0432\u0430 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442<\/li>\n\n\n\n<li>\u0446\u0438\u043a\u043b<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e 100% \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u0442\u0432\u043e\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udd25 \u0427\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0442\u0432\u043e\u0439 <code>cockpit.service<\/code> <\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0412\u043e\u0442 \u043a\u043b\u044e\u0447\u0435\u0432\u0430\u044f \u0441\u0442\u0440\u043e\u043a\u0430:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ExecStart=\/usr\/lib\/cockpit\/cockpit-tls<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u274c Cockpit \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 TLS <\/h3>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u274c Cockpit \u0441\u0430\u043c \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 <\/h3>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u274c Cockpit \u0441\u043b\u0443\u0448\u0430\u0435\u0442 HTTPS \u0447\u0435\u0440\u0435\u0437 socket activation <\/h3>\n\n\n\n<h3 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u274c Cockpit \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c HTTP \u2192 HTTPS \u0432\u0441\u0435\u0433\u0434\u0430 <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e <strong>\u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e<\/strong> \u0441 reverse proxy.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u2714 \u041a\u0430\u043a \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 <\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Cockpit \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u0442\u0430\u043a:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ExecStart=\/usr\/lib\/cockpit\/cockpit-ws --no-tls<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0422\u043e \u0435\u0441\u0442\u044c:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cockpit \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 <strong>\u0442\u043e\u043b\u044c\u043a\u043e HTTP<\/strong><\/li>\n\n\n\n<li>TLS \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 Apache<\/li>\n\n\n\n<li>Cockpit \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 <code>X-Forwarded-*<\/code><\/li>\n\n\n\n<li>\u041d\u0435\u0442 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432<\/li>\n<\/ul>\n\n\n\n<h1 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf1 \u041f\u043e\u0447\u0435\u043c\u0443 \u0443 \u0442\u0435\u0431\u044f \u0432\u043a\u043b\u044e\u0447\u0451\u043d cockpit-tls <\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0432 \u0442\u0432\u043e\u0451\u043c <code>cockpit.service<\/code> \u0435\u0441\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Requires=cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket\nExecStartPre=+\/usr\/lib\/cockpit\/cockpit-certificate-ensure --for-cockpit-tls\nExecStart=\/usr\/lib\/cockpit\/cockpit-tls<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cockpit \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 HTTPS\u2011\u0444\u0430\u0431\u0440\u0438\u043a\u0443<\/li>\n\n\n\n<li>Cockpit \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b<\/li>\n\n\n\n<li>Cockpit \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 TLS\u2011\u043e\u0431\u0451\u0440\u0442\u043a\u0443 \u043f\u043e\u0432\u0435\u0440\u0445 <code>cockpit-ws<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u042d\u0442\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Debian\/Ubuntu, \u043d\u043e \u043e\u043d\u0430 <strong>\u043d\u0435 \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u0434\u043b\u044f reverse proxy<\/strong>.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83d\udee0 \u041a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c (\u043f\u043e\u0448\u0430\u0433\u043e\u0432\u043e) <\/h1>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>1) \u0421\u043e\u0437\u0434\u0430\u0442\u044c override \u0434\u043b\u044f cockpit.service <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl edit cockpit.service<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0412\u0441\u0442\u0430\u0432\u0438\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;Service]\nExecStart=\nExecStart=\/usr\/lib\/cockpit\/cockpit-ws --no-tls<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0421\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>2) \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c HTTPS\u2011\u0444\u0430\u0431\u0440\u0438\u043a\u0443 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl disable --now cockpit-wsinstance-https-factory.socket<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>3) \u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl daemon-reload\nsystemctl restart cockpit<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>4) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ss -tlnp | grep cockpit<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0414\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>LISTEN ... 9090 cockpit-ws<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0418 <strong>\u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c<\/strong>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>LISTEN ... 9091 cockpit-tls\nLISTEN ... 9090 cockpit-tls<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\udde9 \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0442\u0432\u043e\u0439 Apache\u2011\u043a\u043e\u043d\u0444\u0438\u0433 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u043e <\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u043e \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u044c WebSocket\u2011\u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ProxyPass \"\/socket\" \"ws:\/\/192.168.0.162:9090\/socket\"\nProxyPassReverse \"\/socket\" \"ws:\/\/192.168.0.162:9090\/socket\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0418 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>RequestHeader set X-Forwarded-Proto \"https\"\nRequestHeader set X-Forwarded-SSL \"on\"<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u041f\u043e\u043b\u043d\u0430\u044f \u043e\u0447\u0438\u0441\u0442\u043a\u0430 Cockpit \u0432 Debian 13 (\u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a) <\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0440\u043e\u0442\u043a\u043e: <strong>\u044d\u0442\u043e \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e<\/strong>, \u0447\u0442\u043e <code>cockpit-session<\/code> \u0438 <code>cockpit-tls<\/code> \u043d\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u2014 \u0432 Debian 13 \u044d\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b. \u041d\u043e \u0435\u0441\u043b\u0438 \u0442\u0432\u043e\u044f \u0446\u0435\u043b\u044c \u2014 <strong>\u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 Cockpit<\/strong>, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0412\u0421\u0415 \u044e\u043d\u0438\u0442\u044b, \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438, \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0441\u043e\u043a\u0435\u0442\u044b, PAM\u2011\u043a\u043e\u043d\u0444\u0438\u0433\u0438 \u0438 \u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0442\u043e \u044f \u0434\u0430\u043c \u0442\u0435\u0431\u0435 <strong>\u043f\u043e\u043b\u043d\u044b\u0439, \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u0447\u0435\u043a\u2011\u043b\u0438\u0441\u0442<\/strong>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 Cockpit <em>\u0446\u0435\u043b\u0438\u043a\u043e\u043c<\/em>, \u0431\u0435\u0437 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0441\u043b\u0435\u0434\u0430.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83c\udfaf \u041f\u043e\u043b\u043d\u0430\u044f \u043e\u0447\u0438\u0441\u0442\u043a\u0430 Cockpit \u0432 Debian 13 (\u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a) <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041d\u0438\u0436\u0435 \u2014 <strong>\u0442\u043e\u0447\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439<\/strong>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 Cockpit \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 1. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Debian 13 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u0442\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt purge cockpit cockpit-ws cockpit-system cockpit-networkmanager cockpit-packagekit cockpit-storaged cockpit-bridge cockpit-doc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u0430\u043a\u0435\u0442\u043e\u0432:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>cockpit-session<\/code><\/li>\n\n\n\n<li><code>cockpit-tls<\/code><\/li>\n\n\n\n<li><code>cockpit-pcp<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0432 Debian <strong>\u043d\u0435\u0442<\/strong>, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 2. \u0410\u0432\u0442\u043e\u2011\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt autoremove --purge<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 3. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/cockpit\nrm -rf \/usr\/lib\/cockpit\nrm -rf \/usr\/share\/cockpit\nrm -rf \/run\/cockpit\nrm -rf \/var\/lib\/cockpit\nrm -rf \/var\/log\/cockpit<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 4. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 systemd\u2011\u044e\u043d\u0438\u0442\u043e\u0432 Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Debian \u0441\u0442\u0430\u0432\u0438\u0442 \u044e\u043d\u0438\u0442\u044b \u0432 <code>\/usr\/lib\/systemd\/system\/<\/code>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -f \/usr\/lib\/systemd\/system\/cockpit.service\nrm -f \/usr\/lib\/systemd\/system\/cockpit.socket\nrm -f \/usr\/lib\/systemd\/system\/cockpit-wsinstance-http.socket\nrm -f \/usr\/lib\/systemd\/system\/cockpit-wsinstance-https-factory.socket\nrm -f \/usr\/lib\/systemd\/system\/cockpit-issue.service\nrm -f \/usr\/lib\/systemd\/system\/cockpit-certificate-ensure.service<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 5. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u0445 \u044e\u043d\u0438\u0442\u043e\u0432 \u0438 override <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/systemd\/system\/cockpit.service.d\nrm -f \/etc\/systemd\/system\/cockpit.service\nrm -f \/etc\/systemd\/system\/cockpit.socket\nrm -f \/etc\/systemd\/system\/cockpit-wsinstance-http.socket\nrm -f \/etc\/systemd\/system\/cockpit-wsinstance-https-factory.socket<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 6. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 PAM\u2011\u043a\u043e\u043d\u0444\u0438\u0433\u0430 Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -f \/etc\/pam.d\/cockpit<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 7. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Cockpit <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/cockpit\/ws-certs.d<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 8. \u041f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 systemd <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl daemon-reload\nsystemctl reset-failed<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\ud83e\uddf9 9. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430, \u0447\u0442\u043e Cockpit \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u0447\u0435\u0437 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041a\u043e\u0434<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl list-unit-files | grep cockpit\nsystemctl status cockpit\nsystemctl status cockpit.socket\ndpkg -l | grep cockpit<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0412\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u0443\u0441\u0442\u043e.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span><i class=\"fas fa-arrow-right\"><\/i><\/span>\u2714 \u0418\u0442\u043e\u0433 <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0448\u0430\u0433\u043e\u0432:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cockpit \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0451\u043d<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044e\u043d\u0438\u0442\u0430<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043e\u043a\u0435\u0442\u0430<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e PAM\u2011\u043a\u043e\u043d\u0444\u0438\u0433\u0430<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430<\/li>\n\n\n\n<li>\u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0441\u0442\u0430\u044f.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u041f\u043e\u0448\u0430\u0433\u043e\u0432\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Cockpit \u043d\u0430 Proxmox VE \u0438 Debian 13. \u0421\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439.<\/p>\n","protected":false},"author":1,"featured_media":2199,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"footnotes":""},"categories":[33],"tags":[761,767,762,768,70,766,763,765,403,764],"class_list":["post-2198","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-33","tag-cockpit","tag-cockpit-modules","tag-debian-13","tag-networkmanager","tag-proxmox","tag-storaged","tag-763","tag-765","tag-403","tag--cockpit"],"_links":{"self":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts\/2198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2198"}],"version-history":[{"count":7,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts\/2198\/revisions"}],"predecessor-version":[{"id":2211,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/posts\/2198\/revisions\/2211"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=\/wp\/v2\/media\/2199"}],"wp:attachment":[{"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alexisiumus.ru\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}