Cockpit is an application from cockpit-project.org for the configuration of Linux servers. Cockpit offers a user-friendly graphical interface that enables authenticated users to execute any configurations and commands on a device via a secure connection. Network configuration, user administration, status and log views can be managed via a browser. Cockpit, also known as Web Console, is an open source software project sponsored by Red Hat and published under the GNU Lesser General Public License (LGPL).

Cockpit for Revolution Pi is available from RevPi Bookworm on and replaces the application RevPi Status, also known as Webstatus, which was used until RevPi Bullseye (04/2024).

In addition to the standard server configuration, the plugins Revolution Pi and Node-RED are available. They enable the basic configuration of your RevPi base module and a simple activation or deactivation of the services installed.

For the module configuration of the Revolution Pi system, i.e. a RevPi base module with expansion modules, use the PiCtory application or configure directly within your development environment, such as CODESYS.

Starting Cockpit #

RevPi Bookworm or higher is installed on the RevPi.

✓ There is a network connection between the RevPi and your PC.

▷ Open a web browser.

▷ Call up Cockpit via the web browser with revpi[serial number].local
You can find the serial number on the front of the housing.
Alternatively, you can enter the IP address of the RevPi in the web browser.

❯ A security warning may appear in the browser.

▷ Accept the security exception to continue with the login.

❯ The login screen for Cockpit appears.

▷ Log in with user name pi and the device password.
You can find the device password on the sticker on the side of the RevPi housing.

Note

From the RevPi Bookworm Image (08/2025), after 3 failed login attempts, access is locked for 10 minutes.

❯ When you log in for the first time, Cockpit asks you to assign a new password.

▷ Enter the new password twice and confirm with Set password.

❯ Cockpit opens in limited access mode.

▷ Select Limited access in the top main navigation bar to switch to the administrative access mode.

▷ Authenticate yourself with the new password.

❯❯ With this administrative access, you now have superuser rights and can configure the RevPi.

Configuration #

▷ Open the Cockpit menu Revolution Pi.

❯❯ The configuration areas are displayed:

RevPi Apps #

RevPi Apps are available applications on your RevPi.

  • PiCtory is the RevPi application used for module configuration of your Revolution Pi system, i.e. for a RevPi base module with expansion modules.

  • Node-RED is a graphical flow-based tool for connecting devices and automating workflows.

Runtimes #

RevPiPyLoad is a Python-based runtime environment for RevPi. The runtime manages real-time industrial automation tasks and runs user-defined Python scripts.

▷ Activate RevPiPyLoad if you want to run user-defined Python scripts on your RevPi.

Note

Ensure your scripts are compatible with RevPiPyLoad before enabling.

See also:

System Configuration #

Boot to GUI #

In desktop mode, you can boot the RevPi directly into a graphical user interface as an alternative to the terminal.

  • The GUI uses more RAM and processing power than a terminal. If necessary, enable the option for Swap / page file.

  • The GUI is recommended for users who are not familiar with command-line operations.

A lite image comes without a pre-installed Linux GUI. If necessary, install the GUI with sudo apt-get install revpi-ui.

Swap / page file #

Swap uses virtual memory when RAM is full.

▷ Enable swap to prevent system crashes when RAM is exhausted.

▷ Disable swap when performance is low.

Avahi (ZeroConf) #

Avahi enables ZeroConf networking, allowing easy discovery of network services.

  • Accessing the device using hostname.local instead of an IP address.

  • Automatically discovering printers and file shares.

Note

You cannot disable Avahi while connected to Cockpit via an Avahi address (.local). If you need to disable it, use the terminal or connect Cockpit via the IP address of the RevPi instead.

Set clock from NTP-Server #

Synchronizes the system time with an NTP server for accuracy.

  • Ensures accurate timestamps for logs and scheduled tasks.

  • Prevents time drift on devices without a real-time clock.

An active internet connection is required to synchronize with NTP servers.

SSH daemon #

The SSH daemon manages the SSH connections to your RevPi.

▷ Enable the SSH daemon to allows remote terminal access to the RevPi over a network.

▷ Use strong passwords or SSH key-based authentication.

▷ Use ssh pi@revpi[serialnumber].local to connect via SSH.

Require password for sudo commands #

When enabled, users need to enter their password when executing sudo commands.

Caution
Security Risk

With sudo password prompt disabled, commands that require superuser privileges can be executed without additional authentication.

WLAN and BT #

Configuration of the built-in wireless connection module. This applies to:

WLAN #

▷ Select the WLAN country code. Choose the country where you are using the device.

  • Setting the correct country helps prevent connection issues and improves network reliability.

  • Different countries allow different WiFi channels and signal strengths.

▷ Enable toggle to activate WLAN.

▷ Select antenna for wireless connectivity.

  • External antenna (SMA): provides better signal reception in challenging environments. Connect a RP-SMA WLAN antenna at the RP-SMA socket of the RevPi.

  • Internal antenna: uses the built-in antenna.

❯❯ WLAN interface is activated.

▷ Disable WLAN to reduce power consumption and increase security.

BT #

▷ Enable BT for using Bluetooth peripherals such as keyboards or audio devices for your RevPi.

▷ Disable BT to reduce power consumption and increase security.

Regional Settings #

Configuration of the time zone, language and keyboard layout of the system.

Firewall #

As of RevPi Bookworm (08/2025) the Revolution Pi System is additionally protected by a firewall (firewalld). The firewall blocks unauthorized access while allowing data traffic through the necessary ports. The port configurations are defined in the respective packages.

▷ Open the Cockpit menu Networking.

▷ In the section Firewall, select Edit rules and zones.

▷ Select [Add services].

▷ Add firewall rules for additional services/ports:

  • revpi-codesys for the CODESYS Development System

  • revpi-modbus-default for Modbus Server

  • opcua-server-default for OPC UA Server

▷ Select Custom Ports for additional ports not covered by the standard ports listed above.

Alternatively, the firewall can be modified via a terminal:

Command Function

firewall-cmd

Opens the firewall configuration.

sudo firewall-cmd --permanent --add-service=revpi-codesys

Adds standard ports for the connection to the CODESYS Development System.

sudo firewall-cmd --permanent --add-service=revpi-modbus-default

Adds standard ports for Modbus Server.

sudo firewall-cmd --permanent --add-service=opcua-server-default

Adds standard ports for OPC UA Server.

sudo firewall-cmd --permanent --add-port=[name]

Adds additional ports that are not covered by the standard ports listed above.

sudo firewall-cmd --reload

Reloads the firewall (necessary after changing the firewall configuration).

Accounts and Password Management #

You can find the device password on the sticker on the side of the RevPi housing. When you log in for the first time, you are asked to create your own password. Use the Cockpit user management to change the password for the user pi or to create new accounts.

Caution

▷ Change the device password after the first login to prevent unauthorized access.

▷ Use a strong password.

Caution

Do not delete user accounts pi or root, otherwise it will no longer be possible to log in.

▷ Open the Cockpit menu Accounts.

▷ Open the three-dot menu ⁝ for user pi and select Edit user.

▷ Select Set password.

▷ Enter the new password twice and confirm with Set password.

❯❯ The password for user pi is changed.

Alternatively, you can change the password via a terminal.

Changing Language for Cockpit #

The following languages are supported for the Cockpit RevPi Applications:

  • English

  • German

▷ Open the drop-down menu Sessions in the top main navigation bar.

▷ Select Display language to change the language for Cockpit.

Rebooting RevPi #

▷ Open Cockpit menu Overview.

▷ Select Reboot at the top right.

▷ Select a Delay for the reboot.

▷ Select Reboot.

❯ The RevPi is shut down and will reboot. The power LED flashes red.

❯ The power LED lights up green as soon as the RevPi is ready for operation.

▷ Select Reconnect and log in.

Alternatively, you can reboot the RevPi via a terminal.

Shutting Down RevPi #

▷ Open the Cockpit menu Overview.

▷ Open the dropdown next to Reboot and select Shutdown.

▷ Select a Delay for the shutdown.

▷ Select Shutdown.

❯ The RevPi is shut down and disconnected from Cockpit.

Note

To restart the RevPi after a shutdown, the power supply must be disconnected and reconnected.

Alternatively, you can shutdown the RevPi via a terminal.

Terminal #

▷ Open the Cockpit menu Terminal.

❯❯ Opens an integrated, fully functional terminal that can be used to enter commands directly.

See also: Login via Terminal

Installing Updates #

Caution

▷ Check at regular intervals whether updates are available.

▷ Install updates promptly to close security gaps.

▷ Open the Cockpit menu Software updates.

▷ Select the button for Check for updates at the top right (arrow).

❯ The software status is being checked.

▷ Select Install all updates to perform the available updates.

Alternatively, you can install updates via a terminal.

Network #

The Cockpit menu Network provides information about IP addresses and allows you to configure interfaces and the firewall.

See also:

SOS Report #

The SOS report collects system information that can help diagnose problems. This information is only stored on the system and can then be downloaded.

▷ Open the Cockpit menu Diagnostic reports.

▷ Select Run report.

▷ Define a report label as the name for the report and, if necessary, a password (encryption passphrase).

▷ Select Run report.

❯ An SOS report is created.

▷ Select Download to save the SOS report on your PC.