M4 Mac mini + Sequoia + networking

TidBITS Talk
1

Anyone else finding weirdness with Sequoia 15.1 networking plus M4 Mac Mini?

Long story short:

  • friday received new M4 Pro Mac Mini & set it up → nice machine (is to be a replacement for headless mac mini in my office)
  • set the static IP
  • Saturday arv go to put it in it’s proper spot and plugged in ethernet (now have ether + wifi)
  • errr no access to external internet, only internal network
  • fluff around for 2 days, then finally called apple tech and finally escalated to senior tech support guy (very patient and thorough chap, I must say)
  • after an hour, we trash ethernet network prefs in /Library, turn off wifi and everything wonderful
  • 10 minutes after the phone call, turned on wifi - boom - back to square one

Pretty sure this is some sort of Sequoia issue, but thought I’d check here.

Bonus issue: if running headless, you can’t remote into the mac unless you plug in keyboard, monitor and “wake the screen” - that doesn’t seem right.

Thanks for reading this far.

Rob

2

I don’t understand the “arv” reference, but maybe it will help to know that I’ve seen weirdness like that when the Mac is connected to both WiFi and Ethernet. Leave WiFi on for airdrop purposes, but “forget network” so it doesn’t connect and see if that helps.

This may also resolve the headless issue, assuming you have “Wake for Network Access” turned on, as the magic packets might be getting lost.

3

I did wonder when I used the local venacular if that might lose someone.

arv = arvo = afternoon. Sorry about that.

Yes, wake for network access is running. Power settings are all full on, no sleeping, napping, etc. Thanks for checking.

Definitely seems to be some sequoia magic going on here.

4

ah, I found a screen saver setting that might be at play here, so ignore that for now.

5

False alarm…that setting didn’t work.

Still hunting how to make M4 Pro Mac Mini headless…

6

arvo

Afternoon, as in see you Saturday arvo . It is often used in the phrase this arvo , which is sometimes shortened to sarvo : meet you after the game, sarvo . Arvo is an example of a special feature of Australian English, the habit of adding -o to an abbreviated word. Other such words are bizzo ‘business’ and journo ‘journalist’. First recorded in the 1920s and still going strong today.

7

sounds pretty bang on to me. Ripper, mate!

1 Like
8

So it looks like you can’t run the machine headless if FileVault is turned on (because it won’t auto-login).
Turn it on and have it automatically log into a low level account (and with suitable lock screens, etc) is a solution, if a little less secure, I guess.

1 Like
9

If the computer is physically located in a secure location (e.g. your home, where you trust the people living there), you may want to disable FileVault.

FV is only meaningful in the event that the computer is physically stolen or is kept powered-off in a place where you can’t trust those with access, since the storage will unlock after the first login.

If you auto-login, then that means FV is disabled.

If you secure your remote access (e.g. suitable access credential requirements, firewalls, etc.), you should be fine.

If, however, your circumstance is that you can’t do this, an alternative would be to get a KVM switch that provides remote access, so you can remotely log in to the locked system. But these devices are not cheap and may actually cost more than that Mac mini.

And, of course, if a KVM is used, you still need physical security, because your access will be driving the device’s console, so anybody with access to the real console will see what you’re doing and will be able to use that console whenever you’re (remotely) logged in.

1 Like
10

I’d say that in addition to location, another consideration in disabling FileVault is what data is stored on your computer.

11

I should add that you don’t need auto-login if FV is disabled - all services are available.

As far as security goes, it’s not hard to find a well ventilated place that is out of view. These Mac Minis are nicely compact.

12

Exactly. I can live without FV on this. Any critical data is further encrypted at rest.