machines.override.json

[lfanton]

Hi community,

I am trying to modify the "machines.override.json" file to ensure that a specific user can only power on/off and access the VM console.
Is it possible to disable/hide unnecessary menus?

[martinpitt]

Please see https://cockpit-project.org/guide/latest/packages.html#package-manifest-override , that has an example how to hide menu itemss.

[jelly]

I think @lfanton wants to not allow a "guest login" to delete a virtual machine in the machines page. Cockpit does not support fine grained ACL's like this. And as a user can access the terminal page they can do whatever they want with virsh anyway.

[lfanton]

I've blocked access to Cockpit Terminal and other menus using override.json for all menus except 'Machines'.
I've also blocked SSH access.

My goal is to create a very simple interface for customers, allowing them to start/reboot the VM."

[lfanton]

@martinpitt You're right, that file is more like a concept map than a working example...

[martinpitt]

If you have control over the URL/domain (like, running cockpit behind a reverse proxy), there is also the possibility of just installing cockpit-machines and not cockpit-system (or other packages except cockpit-{bridge,ws}, and then only showing the machines page: http://localhost:9090/cockpit/@localhost/machines/index.html . See https://cockpit-project.org/guide/latest/embedding.html

[lfanton]

OK, so hiding the menu isn't enough...

[lfanton]

The documentation page is so poor! Are there other sources?

[martinpitt]

No, that's it. There isn't really that much else to say about them. It's a JSON patch for the package manifest, which is documented here.