Gecko [ cardrly.com ]

Name	Size	Permission
awk	[ DIR ]	drwxr-xr-x
cloud-init	[ DIR ]	drwxr-xr-x
coreutils	[ DIR ]	drwxr-xr-x
cpanel-pdns	[ DIR ]	drwxr-xr-x
dbus-1	[ DIR ]	drwxr-xr-x
dovecot	[ DIR ]	drwxr-xr-x
fwupd	[ DIR ]	drwxr-xr-x
gawk	[ DIR ]	drwxr-xr-x
gcc	[ DIR ]	drwxr-xr-x
getconf	[ DIR ]	drwxr-xr-x
grubby	[ DIR ]	drwxr-xr-x
hostname	[ DIR ]	drwxr-xr-x
imunify-notifier	[ DIR ]	drwxr-xr-x
initscripts	[ DIR ]	drwxr-xr-x
installkernel	[ DIR ]	drwxr-xr-x
linux-boot-probes	[ DIR ]	drwxr-xr-x
man-db	[ DIR ]	drwxr-xr-x
microcode_ctl	[ DIR ]	drwxr-xr-x
nfs-utils	[ DIR ]	drwxr-xr-x
openldap	[ DIR ]	drwxr-xr-x
openssh	[ DIR ]	drwxr-xr-x
os-prober	[ DIR ]	drwxr-xr-x
os-probes	[ DIR ]	drwxr-xr-x
p11-kit	[ DIR ]	drwxr-xr-x
selinux	[ DIR ]	drwxr-xr-x
smartmontools	[ DIR ]	drwxr-xr-x
sssd	[ DIR ]	drwxr-xr-x
sudo	[ DIR ]	drwxr-xr-x
tuned	[ DIR ]	drwxr-xr-x
udisks2	[ DIR ]	drwxr-xr-x
utempter	[ DIR ]	drwxr-xr-x
audit-functions	990 B	-rwxr-x---
chrony-helper	7.17 KB	-rwxr-xr-x
cockpit-askpass	45.41 KB	-rwxr-xr-x
cockpit-certificate-ensure	24.81 KB	-rwxr-xr-x
cockpit-certificate-helper	5.36 KB	-rwxr-xr-x
cockpit-client	12.19 KB	-rwxr-xr-x
cockpit-client.ui	4.13 KB	-rw-r--r--
cockpit-desktop	4.57 KB	-rwxr-xr-x
cockpit-session	57.16 KB	-rwsr-x---
cockpit-ssh	127.35 KB	-rwxr-xr-x
cockpit-tls	49.57 KB	-rwxr-xr-x
cockpit-ws	283.11 KB	-rwxr-xr-x
cockpit-wsinstance-factory	16.51 KB	-rwxr-xr-x
dirmngr_ldap	87.33 KB	-rwxr-xr-x
dnf-utils	3.62 KB	-rwxr-xr-x
exim.daemon	758 B	-rwxr-xr-x
generate-rndc-key.sh	546 B	-rwxr-xr-x
glib-pacrunner	21.66 KB	-rwxr-xr-x
gpg-check-pattern	111.91 KB	-rwxr-xr-x
gpg-preset-passphrase	87.23 KB	-rwxr-xr-x
gpg-protect-tool	206.38 KB	-rwxr-xr-x
gpg-wks-client	227.23 KB	-rwxr-xr-x
grepconf.sh	253 B	-rwxr-xr-x
import-state	1.03 KB	-rwxr-xr-x
imunify-message-gateway	7.95 MB	-rwxr-xr-x
loadmodules	233 B	-rwxr-xr-x
nfsrahead	37.15 KB	-rwxr-xr-x
nm-daemon-helper	12.6 KB	-rwxr-xr-x
nm-dhcp-helper	16.2 KB	-rwxr-xr-x
nm-dispatcher	66.16 KB	-rwxr-xr-x
nm-initrd-generator	740.48 KB	-rwxr-xr-x
no-python	157 B	-rwxr-xr-x
packagekit-direct	105.48 KB	-rwxr-xr-x
packagekitd	315.94 KB	-rwxr-xr-x
pk-offline-update	32.91 KB	-rwxr-xr-x
platform-python	11.59 KB	-rwxr-xr-x
platform-python-config	204 B	-rwxr-xr-x
platform-python3.6	11.59 KB	-rwxr-xr-x
platform-python3.6-config	204 B	-rwxr-xr-x
platform-python3.6m	11.59 KB	-rwxr-xr-x
platform-python3.6m-config	204 B	-rwxr-xr-x
platform-python3.6m-x86_64-con...	3.54 KB	-rwxr-xr-x
report-command-error	8.4 MB	-rwxr-xr-x
run-with-intensity	6.36 MB	-rwxr-xr-x
scdaemon	442.41 KB	-rwxr-xr-x
virt-what-cpuid-helper	7.91 KB	-rwxr-xr-x
xb-tool	24.78 KB	-rwxr-xr-x

Code Editor : cockpit-desktop

#!/bin/bash

# This file is part of Cockpit.
#
# Copyright (C) 2018 Red Hat, Inc.
#
# Cockpit is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
#
# Cockpit is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with Cockpit; If not, see <http://www.gnu.org/licenses/>.

# Run a local bridge, web server, and browser for a particular Cockpit page.
# This is useful for integration into .desktop files, for systems which don't
# have cockpit.socket enabled. The web server and browser run in an unshared
# network namespace, and thus are totally isolated from everything else.
#
# Examples:
#   cockpit-desktop /cockpit/@localhost/system/index.html
#   cockpit-desktop network/firewall
#   cockpit-desktop users
#
# As an experimental/demo feature, the bridge can also be started on a remote
# ssh host. The host name is given as (optional) second argument, which is
# passed verbatim to ssh.
#
# Example:
#   cockpit-desktop system svr1
#   cockpit-desktop / username@svr1
set -eu

# exec_prefix= is set because the default /usr/libexec contains "${exec_prefix}"
exec_prefix="/usr"
libexecdir="/usr/libexec"

# find suitable browser, unless already set by $BROWSER
# We can't use xdg-open, it does too much magic behind the back to connect to
# existing instances (outside of our namespace) and does not allow us to reduce
# the UI, or pass options like chromium's --no-sandbox.
detect_browser()
{
    [ -z "${BROWSER:-}" ] || return 0

# First choice, but it depends on gi.repository WebKit2, so check it
    if /usr/libexec/cockpit-client --help >/dev/null 2>/dev/null; then
        BROWSER="/usr/libexec/cockpit-client --disable-uniqueness --no-ui --external-ws"
        return 0
    fi

for browser in chromium-browser chromium google-chrome; do
        if type $browser >/dev/null 2>&1; then
            # need to disable sandboxing in user namespace, but that already isolates
            # TODO: Find a way to disable the URL bar
            BROWSER="$browser --no-sandbox --disable-infobars"
            return 0
        fi
    done

if type firefox >/dev/null 2>&1; then
        # TODO: Find a way to disable the privacy notice tab, via mozilla.cfg?
        # TODO: Find a way to disable the URL bar
        BROWSER="firefox --no-remote"
        return 0
    fi

# TODO: is there a simple way to use webkitgtk?
    echo "No suitable browser found (Chromium/Chrome, or Firefox)" >&2
    exit 1
}

if [ -z "${1:-}" ]; then
    echo "Usage: $0 <Cockpit path> [ssh host]" >&2
    exit 1
fi

# Expand the commandline argument into a url
case "$1" in
    /*)
        URL_PATH="$1"
        ;;
    */)
        URL_PATH="/cockpit/@localhost/$1index.html"
        ;;
    */*)
        URL_PATH="/cockpit/@localhost/$1.html"
        ;;
    *)
        URL_PATH="/cockpit/@localhost/$1/index.html"
        ;;
esac

detect_browser

# start the bridge; this needs to run in the normal user session/namespace
coproc ${2:+ssh "$2"} cockpit-bridge
trap "kill $COPROC_PID; wait $COPROC_PID || true" EXIT INT QUIT PIPE

# start ws and browser in a detached network namespace
SCRIPT='
set -eu
# new namespaces have lo down by default
ip link set lo up >&2

# start browser in a temporary home dir, so that it does not interfere with your real one
export BROWSER_HOME=$(mktemp --directory --tmpdir cockpit.desktop.XXXXXX)

# forward parent stdin and stdout (from bridge) to cockpit-ws
# it pretty well does not matter which port we use in our own namespace, so use standard http
# disable /etc/cockpit/
XDG_CONFIG_DIRS="$BROWSER_HOME" COCKPIT_SUPERUSER="pkexec" '${COCKPIT_WS:-/usr/libexec/cockpit-ws}' -p 80 -a 127.0.0.90 --local-session=- <&0 >&1 &
WS_PID=$!
# ... and stop using that stdin/out for everything else
exec 0</dev/null
exec 1>&2

trap "set +e; kill $WS_PID; wait $WS_PID; rm -rf $BROWSER_HOME" EXIT INT QUIT PIPE

# if we have netcat, use it for waiting until ws is up
if type nc >/dev/null 2>&1; then
    for retry in `seq 10`; do
        nc -z 127.0.0.90 80 && break
        sleep 0.5;
    done
else
    # otherwise, just wait a bit
    sleep 3
fi

HOME="$BROWSER_HOME" '$BROWSER' http://127.0.0.90'"$URL_PATH"'
'
unshare --user --map-root-user --net /bin/bash -c "$SCRIPT" <&${COPROC[0]} >&${COPROC[1]}

${this.title}

Code Editor : cockpit-desktop