machines.override.json #21120
|
Hi community, I am trying to modify the "machines.override.json" file to ensure that a specific user can only power on/off and access the VM console. |
Replies: 2 comments 8 replies
|
Please see https://cockpit-project.org/guide/latest/packages.html#package-manifest-override , that has an example how to hide menu itemss. |
|
I think @lfanton wants to not allow a "guest login" to delete a virtual machine in the machines page. Cockpit does not support fine grained ACL's like this. And as a user can access the terminal page they can do whatever they want with |
|
I've blocked access to Cockpit Terminal and other menus using override.json for all menus except 'Machines'. My goal is to create a very simple interface for customers, allowing them to start/reboot the VM." |
|
@martinpitt You're right, that file is more like a concept map than a working example... |
|
If you have control over the URL/domain (like, running cockpit behind a reverse proxy), there is also the possibility of just installing cockpit-machines and not cockpit-system (or other packages except cockpit-{bridge,ws}, and then only showing the machines page: http://localhost:9090/cockpit/@localhost/machines/index.html . See https://cockpit-project.org/guide/latest/embedding.html |
|
OK, so hiding the menu isn't enough... |
|
The documentation page is so poor! Are there other sources? |
|
No, that's it. There isn't really that much else to say about them. It's a JSON patch for the package manifest, which is documented here. |
Please see https://cockpit-project.org/guide/latest/packages.html#package-manifest-override , that has an example how to hide menu itemss.