Troubleshooting remote desktop connections to Mac mini servers

Before you start

To complete the actions presented below, you must have:

• A Scaleway account logged into the console
• Owner status or IAM permissions allowing you to perform actions in the intended Organization
• An SSH key
• A Mac mini

Problem

You are unable to establish a remote desktop (VNC) connection to your Scaleway Mac mini.

Symptoms

• VNC client fails to connect to the Mac mini.
• Authentication errors occur during connection attempts.
• Connection times out or is refused.
• Mac mini appears unreachable.

Possible causes

• The Mac mini is powered off or unresponsive.
• The VNC port assigned during system setup is incorrect.
• The SSH server is unresponsive.
• Your connection is blacklisted due to failed attempts.
• Incorrect credentials are being used.
• Remote connection client compatibility issues.

Solution

Verify the server status

Run the following command in a terminal:

ping -c 5 <server_ip>

If ping fails:

• Try rebooting the server.
• If the server was forced to shut down, wait 24 hours for automatic restart.

Verify the VNC connection

Run the following command:

nc -zv <server_ip> <vnc_port>

If the connection fails:

• Verify the correct VNC port in the Overview section of your Scaleway console.
• Reboot the server.
• Restart screen sharing via SSH (see below).

Verify the SSH server response

Run the command:

nc -zv <server_ip> 22

If the connection fails, reboot the server.

Check for connection blacklisting

If VNC connection attempts fail repeatedly, your connection may be blacklisted. Rebooting clears the fail2ban table.

Verify your connection credentials

• VNC: Ensure correct username and password.
• SSH: Ensure your SSH key was provided before installation.

Verify remote access client compatibility

Use a compatible VNC client. See this guide for recommendations.

Reinstall the Mac mini

If all else fails, reinstall macOS via the Scaleway console.

Advanced configuration and security

Enabling and configuring Packet Filter (pf)

1. Open the pf configuration file in a text editor to restrict access to screen sharing:
   sudo nano /etc/pf.conf

2. Add the following lines to the file and save it:
   block in on en0 proto tcp from any to any port 5900
   pass in on en0 proto tcp from <static IP> to any port 5900

3. Apply the configuration:
   sudo pfctl -f /etc/pf.conf

Restarting screen sharing via SSH

1. Connect via SSH:
   ssh your_mac_mini_username@<your_mac_mini_ip>

2. Restart screen sharing:
   sudo killall screensharingd

Further troubleshooting

If the issue persists, contact Scaleway's support for assistance.