BINGO! Thanks for your help- no idea how I got that URL wrong...

no problemo, a second set of eyes always helps

ok it must be ridiculous time where you are, thanks again for your help and will chat at a more sensible time

no problem, im up anyway haha

I'm off to get lunch- BTW I have a simpler method to create the Mac installer =, will send soon

a mac installer would still be awesome 🙂

Seem to be running into an issue where all ports except the wireguard ones fail to open on ipv4 sockets. Can anyone speak to this issue? Its on vultr VPS. I'm just running nm-quick

我用的是HE.NET的DDNS，不支持通配符域名（*.my.net）,家庭网络，动态IP,80、443被ISP禁用，Caddy如何设置HTTPS？最好是ECC证书,想在OPENWRT路由器之后安装NETMAKER

Just for completeness- Alex found the URL I had in the commands was wrong in my blog post about netclient on Synology. This has now been fixed, and I've also made it clearer that this is a client install not a server install

After succesful install NetMaker, I found a random network already there, is this normal?

Also it generated two random nodes after I added another new network, not sure is this normal?

Yes, that is the comms network

good, thanks 🙂

I have three VMs, in a VPC, only one has public ip, I use nip.io to setup domain name, can successfully install the NetMaker dashboard node. I can launch the dashboard. The first action was: - first created a network with no local setup - install netclient on node2 and node3 using the access token - added nodes did show on dashboard but all yellow(warning), I tried to trouble shoot in docker logs and get this:

1648328485: Error saving in-memory database, unable to open mosquitto.db.new for writing.
1648328485: Error: Permission denied.

After some docs check, I think that is because node2 and 3 don't have public IP. so I uninstall netclient using cmd line. and then delete the network. The second action is: - created a network with local turn on - installed netclient on node2 and node3, this time showing Green(healthy) :- - I tried to ping node 3 from node 2 but failed - the node2 and node 3 start to trun Yellow(warning) also the wg commands one two nodes showing different peer . Logs again:

1648384316: Saving in-memory database to mosquitto.db.
1648384316: Error saving in-memory database, unable to open mosquitto.db.new for writing.
1648384316: Error: Permission denied.

{"level":"error","ts":1648317725.7487366,"logger":"http.log.error","msg":"net/http: HTTP/1.x transport connection broken: malformed HTTP response \"\\x00\\x00\\x06\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x05\\x00\\x00@\\x00\"","request":{"remote_addr":"176.53.217.145:35251","proto":"HTTP/1.1","method":"GET","host":"grpc.netmaker.65-49-52-72.nip.io","uri":"/favicon.ico","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36"],"Accept":["*/*"],"Accept-Encoding":["gzip, deflate"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","proto_mutual":true,"server_name":"grpc.netmaker.65-49-52-72.nip.io"}},"duration":0.00171527,"status":502,"err_id":"zabbm243n","err_trace":"reverseproxy.statusError (reverseproxy.go:886)"}
{"level":"error","ts":1648317725.9658267,"logger":"http.log.error","msg":"net/http: HTTP/1.x transport connection broken: malformed HTTP response \"\\x00\\x00\\x06\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x05\\x00\\x00@\\x00\"","request":{"remote_addr":"176.53.217.145:35251","proto":"HTTP/1.1","method":"GET","host":"grpc.netmaker.65-49-52-72.nip.io","uri":"/favicon.ico","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36"],"Accept":["*/*"],"Accept-Encoding":["gzip, deflate"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","proto_mutual":true,"server_name":"grpc.netmaker.65-49-52-72.nip.io"}},"duration":0.001891838,"status":502,"err_id":"ay3i8awtb","err_trace":"reverseproxy.statusError (reverseproxy.go:886)"}

Am I doing something wrong ? why the two nodes can't ping each other?

I just run: netclient list looks like it still try to connect to the deleted network, any idea? I tried : netclient leave but show network not exist How can I cleanly uninstall the nodes?

I managed to get the leave and join right , the peer of two nodes all shows good now. but still not able to ping

having similar issues. Wasnt sure if firewall is managed at each host or what

Great idea, let me check 😀

so if u notice the comm node thats already generated allows ping

I tried to ping comms node from node2 and node3 but failed

here is the ping :

root@nm02:~# ping 10.11.13.254
PING 10.11.13.254 (10.11.13.254) 56(84) bytes of data.
From 10.11.13.2 icmp_seq=1 Destination Host Unreachable
ping: sendmsg: Required key not available

netclient list is working:

shell
root@nm02:~# netclient list | jq
{
  "networks": [
    {
      "name": "8KcN0iZT",
      "current_node": {
        "name": "base-rabbit",
        "interface": "nm-8KcN0iZT",
        "private_ipv4": "172.30.0.1",
        "public_endpoint": "65.49.52.37"
      },
      "peers": [
        {
          "name": "netmaker-1.8KcN0iZT",
          "private_ipv4": "172.30.255.254"
        }
      ]
    },
    {
      "name": "true-net",
      "current_node": {
        "name": "nm02",
        "interface": "nm-true-net",
        "private_ipv4": "10.11.13.2",
        "public_endpoint": "65.49.52.37"
      },
      "peers": [
        {
          "name": "netmaker-1.true-net",
          "private_ipv4": "10.11.13.254"
        },
        {
          "name": "nm01.true-net",
          "private_ipv4": "10.11.13.1"
        }
      ]
    }
  ]
}

I opened 80/443/22/51281-51230 ports on both bashboard node and node2 node3

Any other ports I need to open ? and where to check logs besides the docker logs ?

hmm seems like a different issue

required key not available is an interesting error

eventaully one dashboard node can ping now 🙂

root@nm02:~# wg
interface: nm-8KcN0iZT
  public key: ALbfd25DKQfYY/MMWGW7kdA2fKzAsVrjjxMTwowNCx8=
  private key: (hidden)
  listening port: 37931

peer: UCQf+WSA812Zt82P9cIBfYbh+BbZyYzanxDZPqGueBk=
  endpoint: 65.49.52.72:51821
  allowed ips: 172.30.255.254/32
  latest handshake: 56 seconds ago
  transfer: 19.13 KiB received, 19.90 KiB sent
  persistent keepalive: every 20 seconds

all the nodes show Green, netclient nodes can all ping management node, but netclient nodes can't ping each other, see nm01 and nm02 in screenshot. Not sure anything wrong

do you see all your nodes under true-net when you run "docker exec -it netmaker wg" on the server?