Machine Connectivity
The how-to guides here will help you to:
- connect to your openUC2 OS machine, so that you can access its software
- make your machine's software easy to connect to
This process will be less stressful for you if you've already done the relevant day-0 planning.
How to connect to the machine
To choose which of the following methods you will use for connecting to the machine, refer to our guide for how to choose a networking topology.
directly
via a USB-C cable
-
If your computer runs Windows, then you will first need to install Raspberry Pi's NDIS driver on your computer.
Afterwards, you should see a network adapter named "Raspberry Pi USB Remote NDIS Network Device" in Windows's list of network adapters.
-
Plug one end of a USB-C data cable (not a charging-only cable!) into the machine's dedicated USB-C port.
-
Plug the other end of the USB-C cable into a USB-C port on your computer.
If your computer doesn't have a USB-C port, then you can use a USB-C-to-USB-A adapter.
-
After around 5 to 10 seconds, your computer should indicate that it now has a wired connection.
via an Ethernet cable
-
Plug one end of an Ethernet cable into the machine's built-in Ethernet port.
-
Plug the other end of the Ethernet cable into your computer's Ethernet port.
If your computer doesn't have an Ethernet port, then you can instead plug the other end of the Ethernet cable into an Ethernet-to-USB adapter which you can plug into your computer's USB port.
-
After around 10 to 15 seconds, your computer should indicate that it now has a wired connection.
via the machine's Wi-Fi hotspot
-
On your computer, connect to the machine's Wi-Fi hotspot.
infoBy default, the Wi-Fi hotspot's name is
openuc2-{machine name}, where{machine name}is your machine's machine name. For example, if your machine's machine name isgreat-example-1234, then the Wi-Fi hotspot's name isopenuc2-great-example-1234.When prompted, enter the password for the machine's Wi-Fi hotspot.
warningBy default, the Wi-Fi hotspot's password is
youseetoo. You should change it to a more secure password; otherwise, anyone within range of your machine's Wi-Fi hotspot will be able to do anything they want to your machine. -
After a while, your computer should indicate that it is now connected to the machine's Wi-Fi hotspot.
indirectly
via Tailscale
- Set up remote access for the machine through your own Tailscale tailnet.
- Connect your machine to the internet.
- Add your own computer to your Tailscale tailnet.
- Connect your computer to the internet.
- Activate your computer's connection to the tailnet with your machine.
- Ensure that your tailnet doesn't have any security policies which would prevent your computer from connecting to the machine.
- Ensure that your tailnet's security policies protect it from undesired access by other devices on the tailnet.
via a LAN
Before you connect your machine to the internet this way, you should change the pi user's password to something more secure than the default value of youseetoo.
Otherwise, anyone on the same network as your machine may be able to do anything they want to your machine by logging in as the pi user with the password youseetoo.
- Connect your machine to a LAN by following the same procedure you would use to connect your machine to the internet via a network router or external Wi-Fi network.
- Connect your computer to the same LAN.
If you intend to access administrative apps over the LAN, you will need to explicitly allow access to unauthenticated administrative apps over the LAN.
How to access the machine's landing page
The following factors will determine which access methods work for you:
- The networking topology you've selected.
- The specific way in which you're connecting your computer to the machine.
- Your operating system's settings, and its mDNS support.
- Your web browser's DNS settings, and its mDNS support.
If none of the following access methods work in your situation, please contact openUC2 customer support for help.
via a generic domain name
This method may result in surprising behaviors if your computer is connected to multiple machines; in such scenarios, you should instead use a machine-specific domain name.
-
- In your computer's web browser, try opening the machine's landing page at http://openuc2.local.
infoOn Windows, you may need to first install Apple's Bonjour in order to use
openuc2.local.If that doesn't work, try opening http://openuc2.local instead.
infoopen.uc2only works for direct connections to machines. -
If none of these domain names work, try accessing the landing page via a machine-specific domain name instead.
-
Confirm that the machine name reported at the top of the landing page matches the name of your machine.
If the machine names don't match, then the generic domain name has been reserved by some other machine. Try accessing the landing page via your machine's machine-specific domain name instead.
via a machine-specific domain name
Assuming your machine's name is {machine name},
-
In your computer's web browser, try opening the machine's landing page at
http://openuc2-{machine name}.local. For example, if your machine's machine name isgreat-example-1234, you should openhttp://openuc2-great-example-1234.local.infoOn Windows, you may need to first install Apple's Bonjour in order to use
openuc2-{machine name}.local.If that doesn't work, try opening
http://{machine name}.uc2instead.info{machine name}.uc2only works for direct connections to machines. -
If none of these domain names work and you're connected to the machine directly, try accessing the landing page via a static IP address instead.
via a static IP address
The machine's static IP addresses only work for direct connections to machines.
-
In your computer's web browser, try opening the machine's landing page using the static IP address specific to the network connection method you used for connecting to the machine:
- If you're connected via the machine's Wi-Fi hotspot, try opening http://192.168.4.1.
- If you're connected via an Ethernet cable, try opening http://192.168.5.1.
- If you're connected via a USB-C cable, try opening http://192.168.6.1.
-
Confirm that the machine name reported at the top of the landing page matches the name of your machine.
If the machine name doesn't match, then you've connected to some other machine. Go to the troubleshooting guide at TODO.
via a Tailscale MagicDNS domain name
MagicDNS only works for Tailscale connections to machines.
- Set up a Tailscale connection from your computer to the machine.
- Enable MagicDNS on your tailnet.
- In your computer's web browser, try entering the machine's MagicDNS domain name (which should have the format
openuc2-{machine name}.{tailnet DNS name}, e.g.openuc2-great-example-1234.cool-breeze.ts.net).
How to connect the machine to the internet
To choose which of the following methods you will use for giving the machine internet access, refer to our guide for how to choose a networking topology.
via an Ethernet connection to a network router
Before you connect your machine to the internet this way, you should change the pi user's password to something more secure than the default value of youseetoo.
Otherwise, anyone on the same network as your machine may be able to do anything they want to your machine by logging in as the pi user with the password youseetoo.
-
Plug one end of an Ethernet cable into the machine's Ethernet port.
-
Plug the other end of the Ethernet cable into an Ethernet port which is connected to the network router.
-
In your computer's web browser, open the Machine Administration app from the machine's landing page.
-
Open the Internet Access page.
-
Check the status of the
eth0module at the bottom of the page. If it's connected to the router, then its connectivity status will be listed as "full" to indicate that the network router seems to provide internet access to the machine.If you instead see a "limited" connectivity status, then the network router may be blocking internet access to the machine; or if you see a "none" connectivity status, then the network router may be blocking the machine. In either case, you'll need to ask for help from someone who manages the security settings for the network you're trying to access.
If you need to know the MAC address of your machine's Ethernet module in order to register your machine with the network router, you can see the MAC address by expanding the "Other" panel of the eth0 module information card on the Internet Access page.
via an external Wi-Fi network
Before you connect your machine to the internet this way, you should change the pi user's password to something more secure than the default value of youseetoo.
Otherwise, anyone on the same network as your machine may be able to do anything they want to your machine by logging in as the pi user with the password youseetoo.
-
In your computer's web browser, open the Machine Administration app from the machine's landing page.
-
Open the Internet Access page.
-
In the "External Wi-Fi network" section, configure a Wi-Fi network for the machine to connect to:
-
Select the Wi-Fi network you want to connect to in the "Network" dropdown menu.
If it's not listed, press the "Rescan" button above the dropdown menu to refresh the menu.
If it's still not listed, select the "(other: specify below)" option, and then type in the exact name of the Wi-Fi network you want to connect to.
-
Either enter the Wi-Fi network's password or select the "No password" option.
-
If you want the machine to automatically connect to the network whenever it's available, then select the "Always connect when available" radio button.
Otherwise, you'll have to press the "Save and connect" button below whenever you want the machine to connect to the network.
-
Press the "Save and connect" button. The machine will connect to the Wi-Fi network.
-
If you need to know the MAC address of your machine's Ethernet module in order to register your machine with the network router, you can see the MAC address by expanding the "Other" panel of the wlan1 module information card on the Internet Access page.
with a captive portal
If the Wi-Fi network has a captive portal, you will first need to interact with the captive portal in order for the machine to receive internet access from the network:
-
Connect your machine to the Wi-Fi network, if you haven't already done so.
-
Connect your computer to the machine, if you haven't already done so.
-
Disconnect your computer from any networks which might directly give it internet access.
-
Open the captive portal from your computer's web browser by trying to open a normal webpage which requires internet access, such as google.com.
If the captive portal doesn't load that way, you'll instead need to open the specific URL of the captive portal's webpage.
-
Fill out the form on the captive portal, if it requires you to do so in order to receive internet access.
-
Confirm that your machine now has internet access by trying to open a normal webpage from your computer's web browser, such as google.com.
Afterwards, you can connect your computer back to any networks which might directly give it internet access.
How to set up remote access
for remote assistance from openUC2
-
In your computer's web browser, open the Machine Administration app from the machine's landing page.
-
In the Machine Administration app, open the Remote Access page.
-
If the status of the remote-access agent is "needs login", then in the "Remote assistance" section you should paste in the device authentication key given to you by openUC2 customer support.
Otherwise, if the status is "stopped" and a domain name is listed in the format openuc2-{machine name}.queue-macaroni.ts.net, then you don't need to paste in a device authentication key.
Otherwise, if the status is "running" and the network listed is not openuc2-gmbh.github, then you will need to first disable remote assistance and then paste in a device authentication key given to you by openUC2 customer support.
- In the "Remote assistance" section, press the "Enable" button.
through your own Tailscale tailnet
-
If you don't already have a Tailscale tailnet, create one.
-
Add your machine to your Tailscale tailnet:
-
In your web browser, open the Tailscale Admin Console's Add Linux server page.
-
Click the "Generate install script" or "Re-generate install script" button at the bottom of the page.
-
Copy the resulting setup command, which will look something like:
curl -fsSL https://tailscale.com/install.sh | sh && sudo tailscale up --auth-key=tskey-auth-something-random -
In your computer's web browser, open the Machine Administration app from the machine's landing page.
-
In the Machine Administration app, open the Remote Access page.
-
If remote asssistance is already enabled (e.g. over the
openuc2-gmbh.githubnetwork for receiving remote assistance from openUC2 customer support), then you will need to disable it. -
Paste in the Tailscale setup command as the device authentication key, and press the "Enable" button.
-
Confirm that the remote-access agent's status is reported as "running" and that its connectivity is reported as "connected".
If it is not connected, then the network providing access to your machine may be blocking Tailscale.
-
As long as your machine is connected to your own tailnet instead of the openuc2-gmbh.github remote-access network, openUC2 customer support will not be able to access your machine for providing remote assistance.