Cockpit Web Console Unreachable on Port 9090 on RHEL 9

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Browser cannot reach https://host:9090 and connection times out or is refused.

Environment & Reproduction

cockpit.socket disabled, package missing, firewalld not allowing cockpit service, or SELinux issue.

Root Cause Analysis

Run: sudo systemctl status cockpit.socket and ss -tulpen | grep 9090.

Quick Triage

Confirm package installation with rpm -q cockpit and test local curl to port 9090.

Step-by-Step Diagnosis

Capture cockpit.socket status and listener checks.

Solution – Primary Fix

Capture enabled cockpit service in firewalld and active socket.

Solution – Alternative Approaches

Install if needed: sudo dnf install -y cockpit.

Verification & Acceptance Criteria

Enable socket: sudo systemctl enable –now cockpit.socket.

Rollback Plan

Allow firewall service: sudo firewall-cmd –permanent –add-service=cockpit && sudo firewall-cmd –reload.

Prevention & Hardening

Access Cockpit URL and verify successful login and dashboard load.

Related Errors & Cross-Refs

Track cockpit.socket health with monitoring and configuration drift controls.

Related tutorial: View the step-by-step tutorial for rhel-9.

View all rhel-9 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Disable cockpit.socket and remove service exposure if policy requires closure.