Openziti quick installation, ziti-controller and ziti router not installed

Not sure what i am doing wrong for the life of me! try it a few times, watch the video, step by step.
once done, i can do zitiLogin, which ziti, then ziti version, however it only show the version of ziti, and it show everything else not install, even thought i can see clearly the router and controller is running. after installing zrok, and doing ziti edge list identities, i only see frontend, default admin, local edge router and it doesnt show ctrl at all like the video. What am i doing wrong/missing? :slight_smile:

below is log of ziti version, ziti edge list identities, and the ziti expressinstall

root@localhost:~# ziti version
NAME VERSION
ziti v0.31.4
ziti-controller not installed
ziti-prox-c not installed
ziti-router not installed
ziti-tunnel not installed
ziti-edge-tunnel not installed
root@localhost:~# ziti edge list identities
ā•­ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā•®
ā”‚ ID ā”‚ NAME ā”‚ TYPE ā”‚ ATTRIBUTES ā”‚ AUTH-POLICY ā”‚
ā”œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¤
ā”‚ HO5SRWnl7 ā”‚ Default Admin ā”‚ Default ā”‚ ā”‚ Default ā”‚
ā”‚ OtUnwLVI8d ā”‚ public ā”‚ Default ā”‚ ā”‚ Default ā”‚
ā”‚ dhDJs2FkGC ā”‚ localhost-edge-router ā”‚ Router ā”‚ ā”‚ Default ā”‚
ā•°ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā•Æ
results: 1-3 of 3

root@localhost:~# source /dev/stdin <<< "$(wget -qO- https://get.openziti.io/zit                        i-cli-functions.sh)"; expressInstall
-------------------------------------------------------------
                          _   _     _
                    ____ (_) | |_  (_)
                   |_  / | | | __| | |
                    / /  | | | |_  | |
                   /___| |_|  \__| |_|

-------------------------------------------------------------

This script will make it trivial to set up a very simple environment locally whi                        ch will allow you to start
learning ziti. This environment is suitable for development work only and is not                         a decent representation of
a fully redundant production-caliber network.

Please note that, by default, this script will write files to your home director                        y into a directory named .ziti.
The currently configured location for these files will be:


  \----------------------------------\
   \                                  \        __
    \         Welcome To:              \       | \
     >        Ziti Express 2.0          >------|  \       ______
    /                                  /       --- \_____/**|_|_\____  |
   /                                  /          \_______ --------- __>-}
  /----------------------------------/              /  \_____|_____/   |
                                                    *         |
                                                             {O}

Let's get started creating your local development network!

******** Setting Up Your OpenZiti Environment ********
Populating environment variables
Do you want to keep the generated admin password '6LoVgdxpydlzFeBQxH65GLdr_xOs4u                        a7'? (Y/n)
INFO: using ZITI_PWD=xxxxx
ZITI_CTRL_EDGE_ADVERTISED_PORT overridden: 8441
ZITI_CTRL_EDGE_ADVERTISED_ADDRESS overridden: ziti.azmedicalit.com
ZITI_CTRL_ADVERTISED_PORT overridden: 8440
ZITI_ROUTER_PORT overridden: 8442
ZITI_HOME overridden: /root/.ziti/quickstart/localhost
Your OpenZiti environment has been set up successfully.

A file with all pertinent environment values was created here: /root/.ziti/quick                        start/localhost/localhost.env

********      Getting OpenZiti Binaries       ********
Getting OpenZiti binaries

No existing binary found, creating the ZITI_BIN_DIR directory (/root/.ziti/quick                        start/localhost/ziti-bin/ziti-v0.31.4)
Downloading https://github.com/openziti/ziti/releases/download/v0.31.4/ziti-linu                        x-amd64-0.31.4.tar.gz to /root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4/                        ziti-linux-amd64-0.31.4.tar.gz
OpenZiti binaries v0.31.4 successfully extracted to /root/.ziti/quickstart/local                        host/ziti-bin/ziti-v0.31.4

******** Ensure the Necessary Ports Are Open  ********
Checking Controller's port (8440) Open
Checking Edge Router's port (8442) Open
Checking Edge Controller's port (8441) Open
Checking Router Listener Bind Port's port (10080) Open
Expected ports are all available

******** Generating Public Key Infrastructure ********
Generating PKI
Creating CA: localhost-root-ca
Success

Creating CA: localhost-edge-controller-root-ca
Success

Creating CA: localhost-signing-root-ca
Success

Creating intermediate: localhost-root-ca localhost-intermediate 1
Using CA name:  localhost-root-ca
Success

Creating intermediate: localhost-edge-controller-root-ca localhost-edge-controll                        er-intermediate 1
Using CA name:  localhost-edge-controller-root-ca
Success

Creating intermediate: localhost-signing-root-ca localhost-signing-intermediate_                        grandparent_intermediate 2
Using CA name:  localhost-signing-root-ca
Success

Creating intermediate: localhost-signing-intermediate_grandparent_intermediate l                        ocalhost-signing-intermediate 1
Using CA name:  localhost-signing-intermediate_grandparent_intermediate
Success


Creating server cert from ca: localhost-intermediate for localhost,ziti.azmedica                        lit.com / 127.0.0.1,172.233.142.111
Using CA name:  localhost-intermediate
Success
Creating client cert from ca: localhost-intermediate for localhost,ziti.azmedica                        lit.com
Using CA name:  localhost-intermediate
Success

Creating server cert from ca: localhost-edge-controller-intermediate for localho                        st,ziti.azmedicalit.com / 127.0.0.1,172.233.142.111
Using CA name:  localhost-edge-controller-intermediate
Success
Creating client cert from ca: localhost-edge-controller-intermediate for localho                        st,ziti.azmedicalit.com
Using CA name:  localhost-edge-controller-intermediate
Success

PKI generated successfully

********         Setting Up Controller        ********
adding controller root CA to ca bundle: /root/.ziti/quickstart/localhost/pki/loc                        alhost-root-ca/certs/localhost-root-ca.cert
adding signing root CA to ZITI_PKI_CTRL_CA: /root/.ziti/quickstart/localhost/pki                        /cas.pem
wrote CA file to: /root/.ziti/quickstart/localhost/pki/cas.pem
adding parent intermediate CA to ZITI_PKI_SIGNER_CERT: /root/.ziti/quickstart/lo                        calhost/pki/signing.pem
adding grandparent intermediate CA to ZITI_PKI_SIGNER_CERT: /root/.ziti/quicksta                        rt/localhost/pki/signing.pem
wrote signer cert file to: /root/.ziti/quickstart/localhost/pki/signing.pem
Controller configuration file written to: /root/.ziti/quickstart/localhost/local                        host.yaml
ZITI_HOME overridden: /root/.ziti/quickstart/localhost
localhost initialized. See /root/.ziti/quickstart/localhost/localhost-init.log f                        or details
[1] 1471
ziti controller started as process id: 1471. log located at: /root/.ziti/quickst                        art/localhost/localhost.log
waiting for the controller to come online to allow the edge router to enroll
waiting for https://ziti.azmedicalit.com:8441

******** Setting Up Edge Router ********
Untrusted certificate authority retrieved from server
Verified that server supplied certificates are trusted by server
Server supplied 5 certificates
Server certificate chain written to /root/.config/ziti/certs/ziti.azmedicalit.com
Token: f7325fba-05a0-423a-a0f9-21dcad366f2a
Saving identity 'default' to /root/.config/ziti/ziti-cli.json

----------  Creating an edge router policy allowing all identities to connect to routers with a #public attribute
----------  Creating a service edge router policy allowing all services to use #public edge routers

USING ZITI_ROUTER_NAME: localhost-edge-router
Token: 2206cd0b-138f-4864-88c2-386a6fe55f43
Saving identity 'default' to /root/.config/ziti/ziti-cli.json
Found 0 edge-routers with id or name matching localhost-edge-router
New edge router localhost-edge-router created with id: dhDJs2FkGC
Enrollment expires at 2024-02-09T12:42:12.128Z
public router configuration file written to: /root/.ziti/quickstart/localhost/localhost-edge-router.yaml
Enrollment successful

Controller stopped.
Edge Router enrolled.

Congratulations. Express setup complete!
Your ZITI_HOME is located here: /root/.ziti/quickstart/localhost
Your admin password is: xxx

Start your Ziti Controller by running the function: startController
Start your Ziti Edge Router by running : startRouter

[1]+  Done                    "${ZITI_BIN_DIR-}/ziti" controller run "${ZITI_HOME}/${ZITI_CTRL_NAME}.yaml" &> "${log_file}" 2>&1
root@localhost:~# ^C
root@localhost:~#
root@localhost:~# createControllerSystemdFile
createRouterSystemdFile "${ZITI_ROUTER_NAME}"
Controller systemd file written to: /root/.ziti/quickstart/localhost/localhost.service
Router systemd file written to: /root/.ziti/quickstart/localhost/localhost-edge-router.service
root@localhost:~# stopRouter
stopController
No process found.
No process found.
root@localhost:~# sudo cp "${ZITI_HOME}/${ZITI_CTRL_NAME}.service" /etc/systemd/system/ziti-controller.service
sudo cp "${ZITI_HOME}/${ZITI_ROUTER_NAME}.service" /etc/systemd/system/ziti-router.service
sudo systemctl daemon-reload
sudo systemctl enable --now ziti-controller
sudo systemctl enable --now ziti-router
Created symlink /etc/systemd/system/multi-user.target.wants/ziti-controller.service ā†’ /etc/systemd/system/ziti-controller.service.
Created symlink /etc/systemd/system/multi-user.target.wants/ziti-router.service ā†’ /etc/systemd/system/ziti-router.service.
root@localhost:~# sudo systemctl -q status ziti-controller --lines=0 --no-pager
sudo systemctl -q status ziti-router --lines=0 --no-pager
ā— ziti-controller.service - Ziti-Controller
     Loaded: loaded (/etc/systemd/system/ziti-controller.service; enabled; vendor preset: enabled)
     Active: active (running) since Fri 2024-02-09 09:44:39 UTC; 1s ago
   Main PID: 1611 (ziti)
      Tasks: 7 (limit: 1115)
     Memory: 64.0M
        CPU: 846ms
     CGroup: /system.slice/ziti-controller.service
             ā””ā”€1611 /root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4/ziti controller run /root/.zā€¦
ā— ziti-router.service - Ziti-Router for localhost-edge-router
     Loaded: loaded (/etc/systemd/system/ziti-router.service; enabled; vendor preset: enabled)
     Active: active (running) since Fri 2024-02-09 09:44:39 UTC; 1s ago
   Main PID: 1638 (ziti)
      Tasks: 5 (limit: 1115)
     Memory: 140.8M
        CPU: 330ms
     CGroup: /system.slice/ziti-router.service
             ā””ā”€1638 /root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4/ziti router run /root/.ziti/ā€¦
root@localhost:~# source ~/.ziti/quickstart/$(hostname -s)/$(hostname -s).env
NOT OVERRIDING: env var ZITI_ARCH already set. using existing value
NOT OVERRIDING: env var ZITI_BINARIES_FILE already set. using existing value
NOT OVERRIDING: env var ZITI_BINARIES_VERSION already set. using existing value
NOT OVERRIDING: env var ZITI_BIN_DIR already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_ADVERTISED_ADDRESS already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_ADVERTISED_PORT already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_EDGE_ADVERTISED_ADDRESS already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_EDGE_ADVERTISED_PORT already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_EDGE_IP_OVERRIDE already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_EDGE_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_CTRL_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_ENV_FILE already set. using existing value
NOT OVERRIDING: env var ZITI_HOME already set. using existing value
NOT OVERRIDING: env var ZITI_NETWORK already set. using existing value
NOT OVERRIDING: env var ZITI_OSTYPE already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_CA already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_CERT already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_EDGE_INTERMEDIATE_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_EDGE_ROOTCA_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_INTERMEDIATE_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_KEY already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_ROOTCA_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_CTRL_SERVER_CERT already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_EDGE_CA already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_EDGE_CERT already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_EDGE_KEY already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_EDGE_SERVER_CERT already set. using existing value
NOT OVERRIDING: env var ZITI_PKI already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_SIGNER_CERT_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_SIGNER_CERT already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_SIGNER_INTERMEDIATE_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_SIGNER_KEY already set. using existing value
NOT OVERRIDING: env var ZITI_PKI_SIGNER_ROOTCA_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_PWD already set. using existing value
NOT OVERRIDING: env var ZITI_ROUTER_ADVERTISED_ADDRESS already set. using existing value
NOT OVERRIDING: env var ZITI_ROUTER_IP_OVERRIDE already set. using existing value
NOT OVERRIDING: env var ZITI_ROUTER_LISTENER_BIND_PORT already set. using existing value
NOT OVERRIDING: env var ZITI_ROUTER_NAME already set. using existing value
NOT OVERRIDING: env var ZITI_ROUTER_PORT already set. using existing value
NOT OVERRIDING: env var ZITI_USER already set. using existing value

adding /root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4 to the path
root@localhost:~# echo $ZITI_HOME
/root/.ziti/quickstart/localhost
root@localhost:~# zitiLogin
Token: e7a6c51b-91da-43ba-a9cd-d2d17aa2d030
Saving identity 'default' to /root/.config/ziti/ziti-cli.json
root@localhost:~# which ziti
/root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4/ziti
root@localhost:~# ziti version
NAME             VERSION
ziti             v0.31.4
ziti-controller  not installed
ziti-prox-c      not installed
ziti-router      not installed
ziti-tunnel      not installed
ziti-edge-tunnel not installed

I see... I have some very good news for you, but i'm sorry you're getting this confusion. That ziti command your running is causing you confusion and probably should be fixed. In the past the router and controller were separate binaries. That's no longer the case and this output is misleading you.

You installed things correctly! These steps here are meant to demonstrate to you that your controller and router are both running correctly and from the output, you did things correctly! See how the status is "running" for both?

root@localhost:~# sudo systemctl -q status ziti-controller --lines=0 --no-pager
sudo systemctl -q status ziti-router --lines=0 --no-pager
ā— ziti-controller.service - Ziti-Controller
Loaded: loaded (/etc/systemd/system/ziti-controller.service; enabled; vendor preset: enabled)
Active: active (running) since Fri 2024-02-09 09:44:39 UTC; 1s ago
Main PID: 1611 (ziti)
Tasks: 7 (limit: 1115)
Memory: 64.0M
CPU: 846ms
CGroup: /system.slice/ziti-controller.service
ā””ā”€1611 /root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4/ziti controller run /root/.zā€¦
ā— ziti-router.service - Ziti-Router for localhost-edge-router
Loaded: loaded (/etc/systemd/system/ziti-router.service; enabled; vendor preset: enabled)
Active: active (running) since Fri 2024-02-09 09:44:39 UTC; 1s ago
Main PID: 1638 (ziti)
Tasks: 5 (limit: 1115)
Memory: 140.8M
CPU: 330ms
CGroup: /system.slice/ziti-router.service
ā””ā”€1638 /root/.ziti/quickstart/localhost/ziti-bin/ziti-v0.31.4/ziti router run /root/.ziti/ā€¦

You did everything correctly, other than use ziti version to try to determine if the controller and router are running. If you don't do that, and continue, I think you'll have success.

ok i need to run and do some stuff. will try again. so the ziti edge list identities, doesnt need to show the ctrl? right now it only show default, public, and router

I can confirm that the only three identiteis I have in my own self-hosted zrok are the same (plus 'me'):

ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā•®
ā”‚ ID        ā”‚ NAME                         ā”‚ TYPE    ā”‚ ATTRIBUTES                          ā”‚ AUTH-POLICY                  ā”‚
ā”œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¼ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¤
ā”‚ JJiViaHt7 ā”‚ ip-172-31-11-231-edge-router ā”‚ Router  ā”‚ brozac.binders,docker.whale.binders ā”‚ Default                      ā”‚
ā”‚ h3S3WVcJm ā”‚ Default Admin                ā”‚ Default ā”‚                                     ā”‚ Default                      ā”‚
ā”‚ nAh65fVNa ā”‚ clint                        ā”‚ Default ā”‚ brozac.dialers,docker.whale.dialers ā”‚ browzer-keycloak-auth-policy ā”‚
ā”‚ tl-SKfVNa ā”‚ public                       ā”‚ Default ā”‚                                     ā”‚ Default                      ā”‚
ā•°ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā•Æ
results: 1-4 of 4

ahh ok. who is this clint guy? he look suspicious!!! lol
Btw, amazing work you guys are doing. I'm very amaze at how well these things work together.

2 Likes