On 10/20/2016 07:32 AM, Stephen Gallagher wrote:
* Create two variants for use with /etc/os-release such as
`VARIANT_ID=server`
and `VARIANT_ID=server-gui`. This would allow us to deliver a different default
systemd presets and firewall configuration to the system. If the Cockpit GUI was
installed later, the administrator would need to explicitly enable
cockpit.socket and grant firewall permission to allow it as a separate action.
I lean toward this option because it follows some of the existing processes and it
won't create any unexpected firewall changes when the cockpit service is installed or
started. For example, if a user installs httpd, they will need to open their own firewall
ports after they start the service.
--
Major Hayden