Gecko [ satitravel.com ]

Name	Size	Permission	Date
awk	[ DIR ]	drwxr-xr-x	2023-11-28 12:27
cloud-init	[ DIR ]	drwxr-xr-x	2026-01-31 01:01
coreutils	[ DIR ]	drwxr-xr-x	2025-12-23 01:01
cpanel-pdns	[ DIR ]	drwxr-xr-x	2025-12-28 15:00
dbus-1	[ DIR ]	drwxr-xr-x	2025-12-21 17:05
dovecot	[ DIR ]	drwxr-xr-x	2026-02-17 01:02
fwupd	[ DIR ]	drwxr-xr-x	2025-12-21 17:05
gawk	[ DIR ]	drwxr-xr-x	2023-11-28 12:27
gcc	[ DIR ]	drwxr-xr-x	2025-08-26 09:44
getconf	[ DIR ]	drwxr-xr-x	2025-12-21 17:06
grubby	[ DIR ]	drwxr-xr-x	2025-12-21 17:06
hostname	[ DIR ]	drwxr-xr-x	2023-11-28 12:27
imunify-notifier	[ DIR ]	drwxr-xr-x	2023-12-23 09:51
initscripts	[ DIR ]	drwxr-xr-x	2025-11-04 09:19
installkernel	[ DIR ]	drwxr-xr-x	2025-12-21 17:06
linux-boot-probes	[ DIR ]	drwxr-xr-x	2026-01-31 01:01
man-db	[ DIR ]	drwxr-xr-x	2023-11-28 12:27
microcode_ctl	[ DIR ]	drwxr-xr-x	2026-02-12 01:01
nfs-utils	[ DIR ]	drwxr-xr-x	2025-12-21 17:06
openldap	[ DIR ]	drwxr-xr-x	2025-03-11 09:44
openssh	[ DIR ]	drwxr-xr-x	2025-12-23 01:01
os-prober	[ DIR ]	drwxr-xr-x	2026-01-31 01:01
os-probes	[ DIR ]	drwxr-xr-x	2026-01-31 01:01
p11-kit	[ DIR ]	drwxr-xr-x	2025-12-21 17:04
selinux	[ DIR ]	drwxr-xr-x	2025-12-21 17:05
smartmontools	[ DIR ]	drwxr-xr-x	2025-12-21 17:06
sssd	[ DIR ]	drwxr-xr-x	2026-02-12 01:01
sudo	[ DIR ]	drwxr-xr-x	2025-12-23 01:01
tuned	[ DIR ]	drwxr-xr-x	2025-12-21 17:06
udisks2	[ DIR ]	drwxr-xr-x	2025-12-21 17:05
utempter	[ DIR ]	drwxr-xr-x	2023-11-28 12:27
audit-functions	990 B	-rwxr-x---	2025-07-15 09:41
chrony-helper	7.17 KB	-rwxr-xr-x	2024-11-05 07:44
cockpit-askpass	45.41 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-certificate-ensure	24.81 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-certificate-helper	5.36 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-client	12.19 KB	-rwxr-xr-x	2025-12-01 08:40
cockpit-client.ui	4.13 KB	-rw-r--r--	2025-12-01 08:40
cockpit-desktop	4.57 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-session	57.16 KB	-rwsr-x---	2026-01-23 15:30
cockpit-ssh	127.35 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-tls	49.57 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-ws	283.09 KB	-rwxr-xr-x	2026-01-23 15:30
cockpit-wsinstance-factory	16.51 KB	-rwxr-xr-x	2026-01-23 15:30
dirmngr_ldap	87.33 KB	-rwxr-xr-x	2026-01-16 01:48
dnf-utils	3.62 KB	-rwxr-xr-x	2024-04-08 10:02
exim.daemon	758 B	-rwxr-xr-x	2026-02-03 18:25
generate-rndc-key.sh	546 B	-rwxr-xr-x	2025-11-06 07:45
glib-pacrunner	21.66 KB	-rwxr-xr-x	2019-10-31 15:15
gpg-check-pattern	111.91 KB	-rwxr-xr-x	2026-01-16 01:48
gpg-preset-passphrase	87.23 KB	-rwxr-xr-x	2026-01-16 01:48
gpg-protect-tool	206.38 KB	-rwxr-xr-x	2026-01-16 01:48
gpg-wks-client	227.23 KB	-rwxr-xr-x	2026-01-16 01:48
grepconf.sh	253 B	-rwxr-xr-x	2018-08-12 07:47
import-state	1.03 KB	-rwxr-xr-x	2025-09-23 08:27
loadmodules	233 B	-rwxr-xr-x	2025-09-23 08:27
nfsrahead	37.12 KB	-rwxr-xr-x	2025-06-04 10:54
nm-daemon-helper	12.6 KB	-rwxr-xr-x	2025-08-26 09:47
nm-dhcp-helper	16.2 KB	-rwxr-xr-x	2025-08-26 09:47
nm-dispatcher	66.16 KB	-rwxr-xr-x	2025-08-26 09:47
nm-initrd-generator	740.48 KB	-rwxr-xr-x	2025-08-26 09:47
no-python	157 B	-rwxr-xr-x	2026-02-05 20:05
packagekit-direct	105.54 KB	-rwxr-xr-x	2023-10-14 13:32
packagekitd	316.01 KB	-rwxr-xr-x	2023-10-14 13:32
pk-offline-update	32.97 KB	-rwxr-xr-x	2023-10-14 13:32
platform-python	11.59 KB	-rwxr-xr-x	2026-02-05 20:05
platform-python-config	204 B	-rwxr-xr-x	2026-02-05 20:05
platform-python3.6	11.59 KB	-rwxr-xr-x	2026-02-05 20:05
platform-python3.6-config	204 B	-rwxr-xr-x	2026-02-05 20:05
platform-python3.6m	11.59 KB	-rwxr-xr-x	2026-02-05 20:05
platform-python3.6m-config	204 B	-rwxr-xr-x	2026-02-05 20:05
platform-python3.6m-x86_64-config	3.54 KB	-rwxr-xr-x	2026-02-05 20:02
report-command-error	7.29 MB	-rwxr-xr-x	2023-10-23 12:58
run-with-intensity	9.14 MB	-rwxr-xr-x	2023-10-23 12:58
scdaemon	442.41 KB	-rwxr-xr-x	2026-01-16 01:48
tcawmgr.cgi	25.1 KB	-rwxr-xr-x	2019-10-13 01:22
virt-what-cpuid-helper	7.91 KB	-rwxr-xr-x	2023-10-14 20:52
xb-tool	24.78 KB	-rwxr-xr-x	2020-08-18 09:47

Rename

#!/bin/bash

# This file is part of Cockpit.
#
# Copyright (C) 2018 Red Hat, Inc.
#
# Cockpit is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
#
# Cockpit is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with Cockpit; If not, see <http://www.gnu.org/licenses/>.

# Run a local bridge, web server, and browser for a particular Cockpit page.
# This is useful for integration into .desktop files, for systems which don't
# have cockpit.socket enabled. The web server and browser run in an unshared
# network namespace, and thus are totally isolated from everything else.
#
# Examples:
#   cockpit-desktop /cockpit/@localhost/system/index.html
#   cockpit-desktop network/firewall
#   cockpit-desktop users
#
# As an experimental/demo feature, the bridge can also be started on a remote
# ssh host. The host name is given as (optional) second argument, which is
# passed verbatim to ssh.
#
# Example:
#   cockpit-desktop system svr1
#   cockpit-desktop / username@svr1
set -eu

# exec_prefix= is set because the default /usr/libexec contains "${exec_prefix}"
exec_prefix="/usr"
libexecdir="/usr/libexec"

# find suitable browser, unless already set by $BROWSER
# We can't use xdg-open, it does too much magic behind the back to connect to
# existing instances (outside of our namespace) and does not allow us to reduce
# the UI, or pass options like chromium's --no-sandbox.
detect_browser()
{
    [ -z "${BROWSER:-}" ] || return 0

# First choice, but it depends on gi.repository WebKit2, so check it
    if /usr/libexec/cockpit-client --help >/dev/null 2>/dev/null; then
        BROWSER="/usr/libexec/cockpit-client --disable-uniqueness --no-ui --external-ws"
        return 0
    fi

for browser in chromium-browser chromium google-chrome; do
        if type $browser >/dev/null 2>&1; then
            # need to disable sandboxing in user namespace, but that already isolates
            # TODO: Find a way to disable the URL bar
            BROWSER="$browser --no-sandbox --disable-infobars"
            return 0
        fi
    done

if type firefox >/dev/null 2>&1; then
        # TODO: Find a way to disable the privacy notice tab, via mozilla.cfg?
        # TODO: Find a way to disable the URL bar
        BROWSER="firefox --no-remote"
        return 0
    fi

# TODO: is there a simple way to use webkitgtk?
    echo "No suitable browser found (Chromium/Chrome, or Firefox)" >&2
    exit 1
}

if [ -z "${1:-}" ]; then
    echo "Usage: $0 <Cockpit path> [ssh host]" >&2
    exit 1
fi

# Expand the commandline argument into a url
case "$1" in
    /*)
        URL_PATH="$1"
        ;;
    */)
        URL_PATH="/cockpit/@localhost/$1index.html"
        ;;
    */*)
        URL_PATH="/cockpit/@localhost/$1.html"
        ;;
    *)
        URL_PATH="/cockpit/@localhost/$1/index.html"
        ;;
esac

detect_browser

# start the bridge; this needs to run in the normal user session/namespace
coproc ${2:+ssh "$2"} cockpit-bridge
trap "kill $COPROC_PID; wait $COPROC_PID || true" EXIT INT QUIT PIPE

# start ws and browser in a detached network namespace
SCRIPT='
set -eu
# new namespaces have lo down by default
ip link set lo up >&2

# start browser in a temporary home dir, so that it does not interfere with your real one
export BROWSER_HOME=$(mktemp --directory --tmpdir cockpit.desktop.XXXXXX)

# forward parent stdin and stdout (from bridge) to cockpit-ws
# it pretty well does not matter which port we use in our own namespace, so use standard http
# disable /etc/cockpit/
XDG_CONFIG_DIRS="$BROWSER_HOME" COCKPIT_SUPERUSER="pkexec" '${COCKPIT_WS:-/usr/libexec/cockpit-ws}' -p 80 -a 127.0.0.90 --local-session=- <&0 >&1 &
WS_PID=$!
# ... and stop using that stdin/out for everything else
exec 0</dev/null
exec 1>&2

trap "set +e; kill $WS_PID; wait $WS_PID; rm -rf $BROWSER_HOME" EXIT INT QUIT PIPE

# if we have netcat, use it for waiting until ws is up
if type nc >/dev/null 2>&1; then
    for retry in `seq 10`; do
        nc -z 127.0.0.90 80 && break
        sleep 0.5;
    done
else
    # otherwise, just wait a bit
    sleep 3
fi

HOME="$BROWSER_HOME" '$BROWSER' http://127.0.0.90'"$URL_PATH"'
'
unshare --user --map-root-user --net /bin/bash -c "$SCRIPT" <&${COPROC[0]} >&${COPROC[1]}