m (internal link cleaning) |
|||
(21 intermediate revisions by 5 users not shown) | |||
Line 5: | Line 5: | ||
| date = 2015-03-24 | | date = 2015-03-24 | ||
| time = all day | | time = all day | ||
| website = [[QA/ | | website = [[QA/Fedora_22_test_days]] | ||
| irc = [irc://irc.freenode.net/#fedora-test-day #fedora-test-day] ([http://webchat.freenode.net/?channels=fedora-test-day webirc]) | | irc = [irc://irc.freenode.net/#fedora-test-day #fedora-test-day] ([http://webchat.freenode.net/?channels=fedora-test-day webirc]) | ||
| fedora_mailing_list = cockpit-devel | | fedora_mailing_list = cockpit-devel | ||
Line 31: | Line 31: | ||
* '''Install Fedora 22 Server.''' Make sure that your installation is recent enough. Either install [https://getfedora.org/en/server/prerelease/ Fedora 22 Server Alpha] or run <code>yum update</code> in an older Fedora 22 Server installation. You should have at least Cockpit 0.44. In the Server variant of Fedora 22, Cockpit is enabled by default. For other variants, please refer to the Notes at the end of this page. | * '''Install Fedora 22 Server.''' Make sure that your installation is recent enough. Either install [https://getfedora.org/en/server/prerelease/ Fedora 22 Server Alpha] or run <code>yum update</code> in an older Fedora 22 Server installation. You should have at least Cockpit 0.44. In the Server variant of Fedora 22, Cockpit is enabled by default. For other variants, please refer to the Notes at the end of this page. | ||
* '''LiveDVD ''' : [https://fedorapeople.org/groups/qa/test_days/cockpit-test-day- | * '''LiveDVD ''' : [https://fedorapeople.org/groups/qa/test_days/cockpit-test-day-i686.iso i686 ISO] [https://fedorapeople.org/groups/qa/test_days/cockpit-test-day-x86_64.iso x86_64 ISO] | ||
** user/password: root/testvm | ** user/password: root/testvm | ||
* '''Image for virt-manager''' : | * '''Image for virt-manager''' : https://fedorapeople.org/groups/qa/test_days/fedora22-cockpit-x86_64.qcow2.xz | ||
** user/password: root/testvm testwheel/testwheel test/test | ** user/password: root/testvm testwheel/testwheel test/test | ||
<pre> | <pre> | ||
# curl https://fedorapeople.org/groups/qa/ | # curl https://fedorapeople.org/groups/qa/test_days/fedora22-cockpit-x86_64.qcow2.xz > fedora22-cockpit-x86_64.qcow2.xz | ||
# unxz | # unxz fedora22-cockpit-x86_64.qcow2.xz | ||
# yum -y install qemu\* | # yum -y install qemu\* | ||
# systemctl restart libvirtd | # systemctl restart libvirtd | ||
# virt-install --connect qemu:///system --ram 2048 -n cockpit --os-type=linux --os-variant=fedora20 --disk path= | # virt-install --connect qemu:///system --ram 2048 -n cockpit --os-type=linux --os-variant=fedora20 --disk path=fedora22-cockpit-x86_64.qcow2,device=disk,format=qcow2 --vcpus=1 --vnc --noautoconsole --import | ||
# sleep 60 | # sleep 60 | ||
# MAC=`virsh dumpxml cockpit | grep 'mac address' | cut -d\' -f2` | # MAC=`virsh dumpxml cockpit | grep 'mac address' | cut -d\' -f2` | ||
Line 51: | Line 51: | ||
After boot, Cockpit is up and running and listens on port 9090. | After boot, Cockpit is up and running and listens on port 9090. | ||
{{admon/important|Firefox 36.0 is known to choke on the | {{admon/important|Firefox 36.0 is known to choke on the HTTPS certificates created by Cockpit 0.44 and earlier.|See the end of this page for a workaround.}} | ||
{{admon/important|The firewall might or might not be open for Cockpit.|See the end of this page for details.}} | |||
* Point a browser at '''<code>http:</code><code>//<server-ip-address>:9090</code>'''. | * Point a browser at '''<code>http:</code><code>//<server-ip-address>:9090</code>'''. | ||
* Cockpit's login page will load. | * Cockpit's login page will load. | ||
Line 94: | Line 95: | ||
If you have problems with any of the tests, report a bug either on [http://github.org/cockpit-project/cockpit/issues Github] or in [http://bugzilla.redhat.com/enter_bug.cgi?component=cockpit&product=Fedora&version=22 Bugzilla]. | If you have problems with any of the tests, report a bug either on [http://github.org/cockpit-project/cockpit/issues Github] or in [http://bugzilla.redhat.com/enter_bug.cgi?component=cockpit&product=Fedora&version=22 Bugzilla]. | ||
{{admon/important|For reporting results use primarily fedora testday app}} | |||
'''[http://209.132.184.193/testdays/show_event?event_id=24 Fedora testday app]''' | |||
If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the tables below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line. | If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the tables below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line. | ||
Line 103: | Line 105: | ||
! User | ! User | ||
! Hardware | ! Hardware | ||
! [ | ! [[QA:Testcase_Cockpit_Login|Password change]] | ||
! [ | ! [[QA:Testcase_Cockpit_Account|Create user account]] | ||
! References | ! References | ||
|- | |- | ||
| [[User: | | [[User:SampleUser|Sample User]] | ||
| Lenovo laptop | | Lenovo laptop | ||
| {{result|pass|| | | {{result|pass||123456}}<ref>Example entry</ref> | ||
| {{result|fail|| | | {{result|fail||654321}} | ||
| <references/> | | <references/> | ||
|- | |- | ||
Line 117: | Line 119: | ||
| {{result|fail||1203632}} | | {{result|fail||1203632}} | ||
| {{result|pass||}} | | {{result|pass||}} | ||
| <references/> | |||
|- | |||
| [[User:todoleza|todoleza]] | |||
| kvm | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:roshi|roshi]] | |||
| Asus Eeepc Netbook (32-bit) | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mbanas|mbanas]] | |||
| Virtual machine | |||
| {{result|pass}} <ref>Bug 1198082 encountered while creating user account</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:psklenar|psklenar]] | |||
| dell precision 490 | |||
| {{result|pass}} <ref>{{bz|1205119}}</ref> | |||
| {{result|pass}} <ref>{{bz|1205094}}</ref><ref>{{bz|1205090}}</ref>{{result|pass}} <ref>{{bz|1205119}}</ref> | |||
| <references/> | |||
|- | |||
| [[User:jscotka|jscotka]] | |||
| libvirt | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mhruscak|mhruscak]] | |||
| QEMU Standard PC (i440FX + PIIX, 1 | |||
| {{result|fail}} <ref>{{bz|1205123}}</ref><ref>{{bz|1205106}}</ref><ref>only password problems</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:blaskovic|blaskovic]] | |||
| KVM | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:rhack|rhack]] | |||
| Lenovo T520 | |||
| {{result|pass}} <ref>Webui looks sane against stupid XSS.</ref> | |||
| | |||
| <references/> | |||
|- | |||
| [[User:mkovarik|mkovarik]] | |||
| Lenovo T440s | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:pschindl|pschindl]] | |||
| Lenovo ThinkPad T520 | |||
| {{result|pass}} <ref>Works fine, the workflow is clear for this.</ref> | |||
| {{result|pass}} <ref>I would be nice if copy and past work. https://github.com/cockpit-project/cockpit/issues/2009</ref> | |||
| <references/> | |||
|- | |||
| [[User:Kinokoio|Kinokoio]] | |||
| libvirt | |||
| {{result|pass}} <ref>Does not do any password validation (can even be the username)</ref> | |||
| {{result|pass}} | |||
| <references/> | | <references/> | ||
|- | |- | ||
Line 126: | Line 194: | ||
! User | ! User | ||
! Hardware | ! Hardware | ||
! [ | ! [[QA:Testcase_Cockpit_DiskIO|Monitor disk I/O]] | ||
! [ | ! [[QA:Testcase_Cockpit_RAID|Create a RAID Device]] | ||
! [ | ! [[QA:Testcase_Cockpit_LVM|Create a Logical Volume]] | ||
! References | ! References | ||
|- | |- | ||
Line 136: | Line 204: | ||
| {{result|pass}} | | {{result|pass}} | ||
| {{result|pass}} | | {{result|pass}} | ||
| <references/> | |||
|- | |||
| [[User:roshi|roshi]] | |||
| Asus Eeepc Netbook (32-bit) | |||
| {{result|pass}} | |||
| {{result|fail}} <ref>{{bz|1205067}}</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mbanas|mbanas]] | |||
| Virtual machine | |||
| {{result|pass}} | |||
| {{result|fail}} <ref>{{bz|1205067}}</ref><ref>Failed to make filesystem on raid device</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:psklenar|psklenar]] | |||
| dell precision 490 | |||
| {{result|pass}} | |||
| | |||
| | |||
| <references/> | |||
|- | |||
| [[User:jscotka|jscotka]] | |||
| libvirt | |||
| {{result|pass}} | |||
| {{result|fail}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mhruscak|mhruscak]] | |||
| QEMU Standard PC (i440FX + PIIX, 1 | |||
| {{result|pass}} | |||
| {{result|fail}} <ref>{{bz|1205067}}</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:blaskovic|blaskovic]] | |||
| KVM | |||
| {{result|pass}} | |||
| {{result|fail}} <ref>{{bz|1205067}}</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mkovarik|mkovarik]] | |||
| Lenovo T440s | |||
| {{result|pass}} | |||
| {{result|fail}} <ref>{{bz|1205067}}</ref> | |||
| | |||
| <references/> | |||
|- | |||
| [[User:pschindl|pschindl]] | |||
| Lenovo ThinkPad T520 | |||
| {{result|pass}} | |||
| {{result|pass}} <ref>Works well with kernel 4.0.0-0.rc4.git1.3. It even cleans /etc/fstab after deleting raid device. Only changing the mount point to empty string isn't working.</ref> | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:Kinokoio|Kinokoio]] | |||
| libvirt | |||
| {{result|pass}} | |||
| {{result|fail}} {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | | <references/> | ||
|- | |- | ||
Line 146: | Line 277: | ||
! User | ! User | ||
! Hardware | ! Hardware | ||
! [ | ! [[QA:Testcase_Cockpit_DockerImage|Download and run image]] | ||
! [ | ! [[QA:Testcase_Cockpit_DockerCommit|Create a new image and run it]] | ||
! References | ! References | ||
|- | |- | ||
Line 155: | Line 286: | ||
| {{result|pass}} | | {{result|pass}} | ||
| <references/> | | <references/> | ||
|- | |||
| [[User:jscotka|jscotka]] | |||
| libvirt | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mhruscak|mhruscak]] | |||
| QEMU Standard PC (i440FX + PIIX, 1 | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:blaskovic|blaskovic]] | |||
| KVM | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mkovarik|mkovarik]] | |||
| Lenovo T440s | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:pschindl|pschindl]] | |||
| Lenovo ThinkPad T520 | |||
| {{result|pass}} | |||
| | |||
| <references/> | |||
|- | |||
|} | |||
=== Network === | |||
{| | |||
! User | |||
! Hardware | |||
! [[QA:Testcase_Cockpit_NetworkIO|Monitor network I/O]] | |||
! [[QA:Testcase_Cockpit_VLAN|Create VLAN]] | |||
! [[QA:Testcase_Cockpit_Bond|Create Bond]] | |||
! References | |||
|- | |||
| [[User:roshi|roshi]] | |||
| Asus Eeepc Netbook (32-bit) | |||
| {{result|pass}} | |||
| | |||
| | |||
| <references/> | |||
|- | |||
| [[User:mbanas|mbanas]] | |||
| Virtual machine | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:psklenar|psklenar]] | |||
| None | |||
| | |||
| | |||
| {{result|pass}} <ref>{{bz|1205166}}</ref> | |||
| <references/> | |||
|- | |||
| [[User:jscotka|jscotka]] | |||
| libvirt | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mhruscak|mhruscak]] | |||
| QEMU Standard PC (i440FX + PIIX, 1 | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|fail}} <ref>{{bz|1205211}}</ref> | |||
| <references/> | |||
|- | |||
| [[User:blaskovic|blaskovic]] | |||
| KVM | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mkovarik|mkovarik]] | |||
| Lenovo T440s | |||
| {{result|pass}} | |||
| {{result|pass}} {{result|pass}} {{result|pass}} | |||
| | |||
| <references/> | |||
|- | |||
| [[User:Kinokoio|Kinokoio]] | |||
| libvirt | |||
| {{result|pass}} | |||
| | |||
| | |||
| <references/> | |||
|- | |||
|} | |} | ||
Line 162: | Line 392: | ||
<pre> | <pre> | ||
# | # dnf install cockpit | ||
# firewall-cmd --permanent --add-service | # firewall-cmd --permanent --add-service cockpit | ||
# | # firewall-cmd --add-service cockpit | ||
# systemctl start cockpit.socket | # systemctl start cockpit.socket | ||
# systemctl enable cockpit.socket | # systemctl enable cockpit.socket | ||
</pre> | </pre> | ||
=== Work around for Firefox certificate problem === | |||
If you are using Firefox 36.0 (and maybe also older versions), you might experience long delays and even crashes when connecting to Cockpit. See [https://bugzilla.redhat.com/show_bug.cgi?id=1204670 this bug report]. You can work around this by executing the following commands in the machine that runs Cockpit '''before''' connecting to Cockpit for the first time. | |||
<pre> | |||
# cd /tmp | |||
# openssl req -x509 -days 36500 -newkey rsa:2048 -keyout KEY -keyform PEM -nodes -out CERT -outform PEM -subj /CN=localhost | |||
# cat CERT KEY >/etc/cockpit/ws-certs.d/~self-signed.cert | |||
# rm CERT KEY | |||
# systemctl restart cockpit | |||
</pre> | |||
=== Opending the firewall for Cockpit === | |||
Depending on how you have installed Cockpit, the firewall might or might not be open for it. If you install Fedora Server, it should be open, but it currently is not. See [https://bugzilla.redhat.com/show_bug.cgi?id=1204739 this bug]. | |||
In any case, execute the following commands to open it. | |||
<pre> | |||
# firewall-cmd --add-service cockpit | |||
# firewall-cmd --permanent --add-service cockpit | |||
</pre> | |||
The effect is immediate, you don't need to restart Cockpit. | |||
== Long comments == | == Long comments == | ||
<references group="long" /> | <references group="long" /> | ||
[[Category:Fedora 22 Test Days|c]] | [[Category:Fedora 22 Test Days|c]] |
Latest revision as of 21:43, 19 September 2016
Fedora Test Days | |
---|---|
Cockpit Test Day | |
Date | 2015-03-24 |
Time | all day |
Website | QA/Fedora_22_test_days |
IRC | #fedora-test-day (webirc) |
Mailing list | cockpit-devel |
What to test?[edit]
Today's installment of Fedora Test Day will focus on testing Cockpit. Cockpit is a server admin interface.
Who's available[edit]
The following cast of characters will be available testing, workarounds, bug fixes, and general discussion ...
- Development - Stef Walter (stefw), Marius Vollmer (mvollmer), Andreas Nilsson (andreasn), Dominik Perpeet (dperpeet), Peter Volpe (pvolpe)
- Quality Assurance - Jan Ščotka (jscotka)
Prerequisite for Test Day[edit]
A machine that can run Fedora 22 and that you can screw around with. This can be a virtual machine, but we are also very interested in test results on real hardware.
The test machine should ideally have multiple disks and multiple network interfaces. If you use a virtual machine, just add some virtual disks and network adapters.
- Install Fedora 22 Server. Make sure that your installation is recent enough. Either install Fedora 22 Server Alpha or run
yum update
in an older Fedora 22 Server installation. You should have at least Cockpit 0.44. In the Server variant of Fedora 22, Cockpit is enabled by default. For other variants, please refer to the Notes at the end of this page. - LiveDVD : i686 ISO x86_64 ISO
- user/password: root/testvm
- Image for virt-manager : https://fedorapeople.org/groups/qa/test_days/fedora22-cockpit-x86_64.qcow2.xz
- user/password: root/testvm testwheel/testwheel test/test
# curl https://fedorapeople.org/groups/qa/test_days/fedora22-cockpit-x86_64.qcow2.xz > fedora22-cockpit-x86_64.qcow2.xz # unxz fedora22-cockpit-x86_64.qcow2.xz # yum -y install qemu\* # systemctl restart libvirtd # virt-install --connect qemu:///system --ram 2048 -n cockpit --os-type=linux --os-variant=fedora20 --disk path=fedora22-cockpit-x86_64.qcow2,device=disk,format=qcow2 --vcpus=1 --vnc --noautoconsole --import # sleep 60 # MAC=`virsh dumpxml cockpit | grep 'mac address' | cut -d\' -f2` # IP=`cat /var/lib/libvirt/dnsmasq/default.leases |grep $MAC| head -1 | cut -d ' ' -f 3` # echo "connect to http://$IP:9090 (user/password: root/testvm testwheel/testwheel test/test)"
How to test?[edit]
After boot, Cockpit is up and running and listens on port 9090.
- Point a browser at
http:
//<server-ip-address>:9090
. - Cockpit's login page will load.
- Cockpit uses a self-signed certificate, and your browser will very likely warn you about it.
(Here, <server-ip-address>
is the IP address of your machine. You can find it by logging into the machine on the text console as "root" and running ip addr
.)
Once the Cockpit log in screen is loaded in your browser, log in as "root" or some other user in the "wheel" group. You can log into Cockpit as any user that exists on the machine, but only "root" or "wheel" members have enough privileges to execute the test cases.
The test cases are intentionally a bit vague. They don't tell you exactly what button to click, and what to type into which field. You have to figure that out yourself! :-) Cockpit should be `discoverable´, and your feedback about this is very valuable.
The test cases don't cover every feature of Cockpit. Please stray from the test cases into whatever corner of Cockpit you want to explore!
When Cockpit encounters an internal error, a red "Oops" label will appear at the top right. Please report it when this happens. Look in the javascript console (Ctrl-Shift-J) for details. It is not a good idea to continue using Cockpit after an "Oops", but simply reloading the page should put you back on track.
Please report your feedback either on Github or in Bugzilla.
Test Cases[edit]
Test Results[edit]
If you have problems with any of the tests, report a bug either on Github or in Bugzilla.
If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the tables below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the result template to enter your result, as shown in the example result line.
Basic[edit]
User | Hardware | Password change | Create user account | References |
---|---|---|---|---|
Sample User | Lenovo laptop | [2] | ||
Truong Anh Tuan | Asus Laptop | |||
todoleza | kvm | |||
roshi | Asus Eeepc Netbook (32-bit) | |||
mbanas | Virtual machine |
| ||
psklenar | dell precision 490 | |||
jscotka | libvirt | |||
mhruscak | QEMU Standard PC (i440FX + PIIX, 1 | |||
blaskovic | KVM | |||
rhack | Lenovo T520 |
| ||
mkovarik | Lenovo T440s | |||
pschindl | Lenovo ThinkPad T520 |
| ||
Kinokoio | libvirt |
|
Storage[edit]
User | Hardware | Monitor disk I/O | Create a RAID Device | Create a Logical Volume | References |
---|---|---|---|---|---|
Stef Walter | Lenovo Laptop |
| |||
roshi | Asus Eeepc Netbook (32-bit) | ||||
mbanas | Virtual machine | ||||
psklenar | dell precision 490 | ||||
jscotka | libvirt | ||||
mhruscak | QEMU Standard PC (i440FX + PIIX, 1 | ||||
blaskovic | KVM | ||||
mkovarik | Lenovo T440s | ||||
pschindl | Lenovo ThinkPad T520 |
| |||
Kinokoio | libvirt |
Docker[edit]
User | Hardware | Download and run image | Create a new image and run it | References |
---|---|---|---|---|
Stef Walter | Lenovo Laptop | |||
jscotka | libvirt | |||
mhruscak | QEMU Standard PC (i440FX + PIIX, 1 | |||
blaskovic | KVM | |||
mkovarik | Lenovo T440s | |||
pschindl | Lenovo ThinkPad T520 |
Network[edit]
User | Hardware | Monitor network I/O | Create VLAN | Create Bond | References |
---|---|---|---|---|---|
roshi | Asus Eeepc Netbook (32-bit) | ||||
mbanas | Virtual machine | ||||
psklenar | None | ||||
jscotka | libvirt | ||||
mhruscak | QEMU Standard PC (i440FX + PIIX, 1 | ||||
blaskovic | KVM | ||||
mkovarik | Lenovo T440s | ||||
Kinokoio | libvirt |
Notes[edit]
We recommend that you install Fedora 22 Server since we would like you to also test whether Cockpit really works out of the box. Of course, if you would like to test Cockpit but would rather not go through the trouble of installing Fedora from scratch yet one more time, you can also add Cockpit to your existing Fedora system.
# dnf install cockpit # firewall-cmd --permanent --add-service cockpit # firewall-cmd --add-service cockpit # systemctl start cockpit.socket # systemctl enable cockpit.socket
Work around for Firefox certificate problem[edit]
If you are using Firefox 36.0 (and maybe also older versions), you might experience long delays and even crashes when connecting to Cockpit. See this bug report. You can work around this by executing the following commands in the machine that runs Cockpit before connecting to Cockpit for the first time.
# cd /tmp # openssl req -x509 -days 36500 -newkey rsa:2048 -keyout KEY -keyform PEM -nodes -out CERT -outform PEM -subj /CN=localhost # cat CERT KEY >/etc/cockpit/ws-certs.d/~self-signed.cert # rm CERT KEY # systemctl restart cockpit
Opending the firewall for Cockpit[edit]
Depending on how you have installed Cockpit, the firewall might or might not be open for it. If you install Fedora Server, it should be open, but it currently is not. See this bug.
In any case, execute the following commands to open it.
# firewall-cmd --add-service cockpit # firewall-cmd --permanent --add-service cockpit
The effect is immediate, you don't need to restart Cockpit.