RHEL 10 Cockpit Web Console Unreachable on Port 9090

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution — Primary Fix
7. Solution — Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Admins cannot access web console for routine management and diagnostics tasks.

Environment & Reproduction

Occurs after minimal installs, service disablement, or firewall policy changes.

curl -kI https://localhost:9090 ; systemctl status cockpit

Root Cause Analysis

cockpit socket/service not enabled or port 9090 blocked in firewalld.

Quick Triage

Check cockpit package state, socket activation, and firewall rules.

rpm -q cockpit ; systemctl status cockpit.socket ; sudo firewall-cmd --list-services

Step-by-Step Diagnosis

Confirm listener binding and TLS errors in logs.

ss -tulpen | grep 9090 ; sudo journalctl -u cockpit -u cockpit.socket -n 100

Solution — Primary Fix

Install cockpit, enable socket activation, and allow cockpit service in firewalld.

sudo dnf install -y cockpit ; sudo systemctl enable --now cockpit.socket ; sudo firewall-cmd --add-service=cockpit --permanent ; sudo firewall-cmd --reload

Solution — Alternative Approaches

Use SSH tunneling to localhost:9090 when direct inbound access is restricted.

Verification & Acceptance Criteria

HTTPS response on 9090 succeeds and cockpit socket remains active after reboot.

curl -kI https://localhost:9090 ; systemctl is-active cockpit.socket

Rollback Plan

Disable cockpit exposure if not required in hardened environments.

sudo firewall-cmd --remove-service=cockpit --permanent ; sudo firewall-cmd --reload ; sudo systemctl disable --now cockpit.socket

Prevention & Hardening

Restrict cockpit access by source network and enforce MFA-backed privileged accounts.

Related Errors & Cross-Refs

May coincide with SELinux policy denials or expired web console certificates.

Related tutorial: View the step-by-step tutorial for rhel-10.

View all rhel-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

RHEL Cockpit deployment and security hardening documentation.