Emergency UI Not Reachable¶

Symptom: browsing to https://<node-ip>:8443/ produces a connection error, blank page, or never-ending load.

Diagnostics¶

Run on the node (SSH or local console):

# 1. Is the service running?
systemctl status mfcloud-agent --no-pager

# 2. If failing, why?
journalctl -u mfcloud-agent -b --no-pager | tail -50

# 3. Is something listening on 8443?
ss -tlnp | grep 8443

# 4. Can the host reach itself?
curl -kI https://localhost:8443/

# 5. Is the firewall actually open?
firewall-cmd --list-ports

# 6. Did firstboot generate the htpasswd?
ls -l /etc/mfcloud-agent.htpasswd

Common causes¶

You used `http://` instead of `https://`¶

The agent only speaks HTTPS on port 8443. Browser tries HTTP, server doesn't answer, browser shows "connection reset". Fix: use https://.

Browser silently blocked the self-signed cert¶

Chrome/Edge sometimes refuse without offering "Proceed anyway". Two fixes:

Chrome/Edge: type thisisunsafe directly on the warning page (no input field — just type).
Firefox: click Advanced → Accept the Risk and Continue.

For production, replace the self-signed cert at /etc/pki/tls/certs/mfcloud-agent.crt and key at /etc/pki/tls/private/mfcloud-agent.key, then systemctl restart mfcloud-agent.

Service crashed at startup¶

journalctl -u mfcloud-agent will tell you why. Common one-shot recoveries:

systemctl restart mfcloud-agent

If that doesn't work, look for these specific errors in the journal:

Journal message	Cause	Fix
`ModuleNotFoundError: No module named 'fastapi'`	Pip wheels failed to install during `%post`.	`pip3 install fastapi uvicorn pydantic bcrypt`
`Permission denied: '/etc/pki/tls/private/mfcloud-agent.key'`	Cert key wasn't generated.	See installation log for the openssl command.
`RuntimeError: Directory 'static' does not exist`	`WorkingDirectory` not set correctly on the systemd unit.	Verify `/etc/systemd/system/mfcloud-agent.service` has `WorkingDirectory=/opt/mfcloud-agent`.

Firewall closed¶

If firewall-cmd --list-ports doesn't include 8443/tcp:

firewall-cmd --add-port=8443/tcp --permanent
firewall-cmd --reload

You missed the credentials¶

The first-boot password is printed once on the install console and never re-shown. See Reset the Emergency UI Password.