Windows – Yeri Tiete

Remote desktop and Wake-on-LAN

Yeri Tiete — Sat, 09 Jul 2022 23:14:54 +0200

Shan uses her iPad a lot, but a lot of the more serious (interior design) work needs to happen on AutoCAD or Photoshop. That is just not going to work on an iPad.

When we're travelling (read: holiday) she's carrying an old Lenovo ThinkPad 13 (great device!) just "in case" she needs to open AutoCAD and edit something minor or read the drawings/dimensions. But honestly, most of the time that device is turned off and dead weight.

But all the above is just an excuse to "I was bored, and I wanted to test something": can I use an old Raspberry Pi (zero W) to remotely wake her Intel NUC, and then use Tailscale to use RD on her iPad? Well, yes I can.

I completed this using:

Tailscale to remote desktop from anywhere to home
Cloudflare Tunnels, Access and DNS to have a web interface to wake the desktop
A Linux device that's always on and in the same LAN, and that'll run a PHP script.

Prep work: enable WOL

First off: enable Wake-on-LAN (WOL) in the BIOS and in your Windows settings. This article explains it for Intel NUCs, but would be similar enough for most devices. The Device Manager pane looked different on our i5 NUC, but was close enough.

On Mac, you just need to enable it in the Energy preference pane, for Linux I have no clue. 🤷‍♂️

Second step: have a working Raspberry Pi (or any Linux device) in the same LAN. This device needs to be turned on 24/7, so use something that uses very little power.

I do have a more powerful RPi4 I wish I could've reused (running Docker and some other "serious" stuff; however it's currently in a different VLAN, and it's quite crucial the Linux device is in the same LAN as the device(s) you want to wake up), so I went with an old Raspberry Pi Zero W that was collecting dust (it used to run pwnagotchi).

On the Linux device, install etherwake. The command to run is quite simply etherwake aa:bb:cc:11:22:33 (= the ethernet MAC address of your device).

If this doesn't wake your desktop, something is wrong and there's no point continuing. Go and troubleshoot.

Install Tailscale and RD

On the (Windows) desktop and your iPad, install Tailscale. Login, and make sure it works by pinging from one to the other.

Then set up Remote Desktop on both (Windows, iPad). You should test and make sure you can properly connect using the LAN IP address and then the Tailscale IP address.

Fun fact: I create a DNS record for all my devices using Cloudflare DNS with the syntax of device-name.ts.yeri.be, so I don't need to ever remember IPs, and can easily ssh or ping devices without having to look up IPs.

Cloudflare DNS screenshot, filtered on "ts". I add both A and AAAA records (not shown in the screenshot)

Fun fact side track: I actually have a dynamic script that runs (on Linux) and creates hostname.ts.yeri.be for the Tailscale IP, hostname.wg.yeri.be based on the Wireguard IP, hostname.lan.yeri.be based on the LAN IP. This dyndns script runs every so often and updates IPs if needed. All this is running using Cloudflare DNS and their API. Super convenient.

Nginx, php and etherwake

I'm a 80s kid, so I'll use dirty PHP to run this script. I'm sure I'll go straight to hell for this, but yolo.

Install nginx and PHP (no need for MySQL and other stuff).

etherwake requires root to run (because it needs root access to create a weird magic ethernet packet). Create a file in /etc/sudoers.d/etherwake and add this line:

www-data ALL=(ALL) NOPASSWD: /usr/sbin/etherwake

This will allow www-data (nginx/php) to run /usr/sbin/etherwake using sudo, without password.

In /var/www/html/ create an index.php file with:

Wake on Lan

Wake up My Cool Desktop

And a mycooldesktop.php (or whatever) file with:

&1');
echo "$output";
?>
Back

It ain't pretty -- but it gets the job done.

And be sure to edit the MAC address to match your desktop's ethernet MAC address.

Cloudflare tunnels

Install Cloudflare Tunnel (via Zero Trust dashboard).

When creating a new tunnel, the dashboard will give you all needed commands to install the tunnel on your RPi -- but be sure to select the right OS/architecture (arm64? arm? armhf?).

Easy.

And then point the tunnel to http://localhost. No need to mess around with SSL certs.

Lastly, set up Cloudflare Access (via the same Zero Trust dashboard): create a new application, and make sure only approved users can sign in (i.e.: using a pin code emailed to only approved emails).

I only allow access to my own emails, and my family, by using groups.

You can try it yourself via wol.superuser.one. You won't get in. :)

Optionally, but recommended: lock down Nginx to only allow connections from localhost (127.0.0.0/8 and ::1) if using Cloudflare Tunnels, or Cloudflare IPs if using port forwarding with Cloudflare Access in front.

Love my design skills... But it gets the job done: click that link, and it'll execute etherwake.

To recap

We used Tailscale to create a VPN network between the desktop and the iPad. The big benefit is that Tailscale works effortlessly across NAT networks without having to open ports,
We used Cloudflare DNS so we don't need to remember hostnames :),
We used Cloudflare Tunnels to make sure the RPi web interface is accessible across NAT (without port forwarding) and from anywhere,
We used Cloudflare Acces and locked down access to the right people using ACLs,
We used etherwake running on a RPi to wake up devices that are hibernating or turned off.

And that's it really.

PS: technically WoL works with WiFi, but when I enabled WoL on the WiFi adapter, the NUC refused to hibernate/sleep for more than a minute, and kept waking itself up. So, there seems to be some kind of trigger in my network that keeps waking it up. Also, not sure if WoL via WiFi would work if the device is turned off (as opposed to sleep or hibernate). I just ended up using ethernet. 

PPS: both Cloudflare Tunnels and Tailscale use Wireguard tech in the background, so that's really cool.

IE9 is the IE6 of CSS3

Yeri Tiete — Sun, 24 Oct 2010 11:08:52 +0200

I giggled. And then cried a little bit.

Windows update error 80070005

Yeri Tiete — Mon, 07 Sep 2009 01:42:15 +0200

This is usually an error due to incorrect rights on certain files on your system.

In my case, Windows 2008, as domain controller, I was added to the “Domain Guests” group.

Make sure you’re not member of that group, and reboot. This should fix the problem.

MatriXP

Yeri Tiete — Tue, 11 Nov 2008 14:54:05 +0100

Network

Yeri Tiete — Mon, 27 Oct 2008 01:19:50 +0100

From xkcd again.

YouTube of the day

Yeri Tiete — Fri, 19 Sep 2008 16:29:55 +0200

Just 'cause I'm bored.

WoW:WotLK 3.0.1 installers

Yeri Tiete — Wed, 23 Jul 2008 02:51:10 +0200

Here’s a list of all World of Warcraft: Wrath of the Lich King installers:

English: Win - Mac

French: Win - Mac

German: Win - Mac

Spanish: Win - Mac

The download is 2.04Gb (on a Mac), I haven’t started the download on a Windows yet.

And yes, you will still need a beta invitation before being able to login!

You’ll find me under Tuinslak or Isazi on the EU beta realm.

As for the character copy, it was done within 10 minutes. Just 5 hours left on the download. :(

Vista pointing out the obvious

Yeri Tiete — Mon, 19 May 2008 18:40:52 +0200

Mac OS X > Windows

Yeri Tiete — Mon, 14 Jan 2008 14:29:40 +0100

When surfing the web, I came upon an old site we (read: Rootspirit) used to host.

Nick, one of the posters, wrote an article I totally agree with. It really reflects why I’m using Mac instead of Windows now.

Read about it here (Dutch), or here (Google translated, far from understandable)

Bootcamp

Yeri Tiete — Sun, 13 Jan 2008 00:40:31 +0100

For a few courses I’m following at school, I need to be able to run Windows.

As I’m owning a Macbook Pro (with Leopard) that shouldn’t have to be any problem using Bootcamp.

I created a 5 Gb partition and installed WinXP a few weeks ago. So far all fine.

As I don’t really like to reboot into XP (I can’t access my mails, don’t have my IRC client, all my Camino tabs are closed, …) I tried Parallels.

Parallels, at first, was a real disappointment. It crashed my Mac OS X several times. It was only, just a few days later, when they released a patch to solve all Leopard issues, that I started to enjoy it.

Running all my programs from Parallels (instead of rebooting), I never noticed my Bootcamp WinXP was actually broken. As exams were approaching (I’m not allowed to run a virtualization of Windows, because my school’s key and network loggers won’t work like intended, not that I care that much, but they do ;) ), I rebooted for the first time in weeks to my Bootcamp XP, and noticed the famous hal.dll error (or Google it, you’ll see why it’s famous).

I repaired my Windows XP install (as explained in Parallels’ knowledge base), and that indeed fixed the problem… of Bootcamp… My parallels was now broken (hal.dll error for Parallels, instead of Bootcamp). Trying to recreate a new Parallels virtual disk for bootcamp, or even reinstall the program, … All failed. (There should be bootflags to edit, and force Parallels to use a different hal.dll, well, read about it here, it’s no longer useful for me.)

Googling and searching their forums, no luck, no one had a fixed solution. Only ’try this’ and ’try that’. (To follow the above howto I’ve posted, you need to be able to (re)install Parallels, and by the time I found that howto I wasn’t even able to do that; Parallels froze during installation.) I e-mailed the Parallels support team with my problem, and the form said they’d reply within 3 working days… It has been over 2 weeks, and I’m still waiting.

I then noticed that my Mac/Apple keyboard driver weren’t working in Bootcamp-XP, some chars like #, @, > and so forth weren’t working (or at least the layout didn’t match with my Apple keyboard). I tried to reinstall the Bootcamp drivers (located on my Leopard DVD), they all failed to install (no error message…). Being quite fed up with it, I decided to reinstall XP (without formatting, just overwriting my Windows dir). And here too, the drivers failed to install, with no specific error message… Took the required backups, formatted, and had the wild idea to install Vista.

Booted from the Vista install DVD, and came to the conclusion I needed at least 7 Gb disk space to install Vista (having a 5 Gb partition, this wouldn’t work). Back in os X I deleted the Windows partition, and tried to recreate a new (10 Gb) one.

And… This error came up: “Your disk cannot be partitioned because some files cannot be moved” (other link). I now started to panic, as I had less then a week to fix this problem. Following a few try-this-and-try-that’s, I removed a few big files from my disk (someone even said to remove Office 2004, but I wasn’t about to do that), I tried to repair my disk (from the Leopard DVD), I tried smaller partitions, even 5 Gb wouldn’t work, and then, when all hope was almost lost, I tried one last thing; ‘Zero Out Data’. This will overwrite all deleted files (well, marked for deletion by your disk, but still written on it, so this data can theoretically be recovered) with zero’s.

And this too, has to be done from the Mac OS X install CD/DVD.

After, well, about 40 minutes Disk Utility was done, I rebooted right into Leopard, and retried to create a 5 Gb partition… And guess what?! It worked!

I deleted that partition again (5 Gb being to small), and recreated a 15 Gb partition, and this too worked with no problems.

I now happily run Vista on my Macbook Pro, and so far I can’t complain.

The only thing I haven’t been able to fix is Parallels, I can’t even reinstall it (it freezes during install). But heck with it, I’ve lost enough sweat already to fix Bootcamp.