Basic Questions

Hi all,

After a relatively painless installation of IncusOS on a new NUC 14 Essential I’m having issues connecting to it. Specifically, I (a raw beginner) can remotely connect to the IncusOS over a second installation (RaspPi→alpine→incus) but the “incus admin os …” command sequence doesn’t seem to be recognised. Cluster, init, recover, shutdown, sql and waitready are the only sub-commands/options it appears to recognise. I have no idea where to even start looking for a resolution so any help is greatly appreciated.

Secondly, It is unclear to me precisely how to instantiate the tailscale service before/during IncusOS install. My understanding is that there is a (yaml) seed file that should be zipped and put into a directory but the flashed image (balena) doesn’t mount so associating the zipped yaml with the USB img file escapes me.

What might be clarified in the installation documentation - if the client certificates are generated by the links associated with the web tool they seem to be password protected. I think I saw the password written somewhere before I had this problem but couldn’t find it when I did.

Thank you for any help given.

Hello and welcome,

Which version of Incus is installed on the RaspPi incus version For best compatibility it should be 6.20 (latest). Any lower version won’t have all the admin extensions. Either install a Zabbly package or download latest binary from github.

To install any of the extra services it requires a working Incus client. One solution would be to watch the following Youtube video which explains it pretty well.

There are no default passwords as far as I know. You need to define one during your installation or creation of the install medium. In case it is lost as reinstall is the only option.

Would suggest starting solving the first issue and verify the installed incus version on the RaspPI and take the next steps after that.

This tripped me up too. The PKCS#12 client.pfx that is generated in the image customiser has the default password IncusOS, but the only place it’s written is the modal dialogue that pops up when you click “generate” in the client certificate section.

Thanks for that - Alpine doesn’t support Incus 6.2 o-o-t-b but a new install on ubuntu solved that. Now the restoration keys have been saved.

I watched that video but it doesn’t really answer any questions - it focuses more on how tailscale is integrated than the nitty gritties of how to install it. Although I do intend going over the early issues of those livestreams.

The PFX is password protected with IncusOS as the password. The on-screen message that shows up when you click generate gives you that password.

Ah, I see @mbromilow mentioned it already :slight_smile:

It’s annoying that some browsers (most?) require a password on the PFX files, otherwise we’d just have left it without a password…

Hi all - found the method, quite simple really once you know how. Tailscale is up and running.

Thanks for the comments, info and help. Much appreciated