Cockpit Web Console Unreachable on Port 9090 on RHEL 9 – Post 244

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Browser cannot connect to https://host:9090 for Cockpit.

Environment & Reproduction

Check systemctl status cockpit.socket and ss -tulpn | grep 9090.

Root Cause Analysis

Verify local access first, then external client connectivity.

Quick Triage

Socket unit inactive, firewalld rule missing, or cert issue during TLS handshake.

Step-by-Step Diagnosis

Enable and start cockpit.socket, then verify listener state.

Solution – Primary Fix

Add cockpit service in firewalld and reload rules.

Solution – Alternative Approaches

systemctl is-enabled cockpit.socket should be enabled and active.

Verification & Acceptance Criteria

Confirm zone matches interface and remote path allows 9090/tcp.

Rollback Plan

Default policy supports cockpit; inspect AVCs only if custom hardening applied.

Prevention & Hardening

Use journalctl -u cockpit.socket and cockpit-ws logs for handshake errors.

Related Errors & Cross-Refs

Include cockpit health checks in server acceptance tests.

Related tutorial: View the step-by-step tutorial for rhel-9.

View all rhel-9 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Disable temporary exposure if security review has not approved access.