Connector updates

Automatic updates are enabled by default. Each connector has its own preference, including when several connectors run on one server.

Existing installationsCopy Anchor Link

Connectors installed before release 0.17.2 need the updater installed once:

1. Open Install connector beside the connection map.
2. Copy the installation command.
3. Run it on the server.

This preserves tokens and service mappings. The connector briefly reconnects during installation.

Automatic update preferenceCopy Anchor Link

1. Open account Tunnels.
2. Open the connector's Edit tunnel.
3. Clear Update connector automatically to disable updates.
4. Select Save changes.

Select the option again to enable updates. The preference applies to all replicas of that connector and leaves its credential unchanged.

Update scheduleCopy Anchor Link

The updater checks two minutes after boot, then five minutes after each completed check, with a random delay of up to 60 seconds.

An update briefly restarts the affected running connector. Active requests can fail during the restart. A stopped connector stays stopped.

To check immediately, replace the IDs below and run:

sudo systemctl start loclix-connector-update@ACCOUNT-ID.TUNNEL-ID.service

This command respects both the dashboard preference and the local opt-out.

Release verificationCopy Anchor Link

Updates require verified HTTPS and a valid publisher signature. The updater checks the version, architecture, binary, and license notices before installation. If verification or the update check fails, it keeps the installed version.

The initial installer comes from your dashboard host. Review the installation command and use that host's HTTPS address.

Startup failuresCopy Anchor Link

If the updated service fails its initial three-second startup check, the updater restores the previous binary and attempts to restart it. Check your local service after an update; this check only verifies that the connector process started.

A failed release is recorded in .rejected-release under /var/lib/loclix-connector/ACCOUNT-ID.TUNNEL-ID/. After fixing a local startup problem, remove that file to retry the release. A newer release with a different binary hash can proceed automatically.

Local controlCopy Anchor Link

Set "auto_update_disabled": true in the local connector.json to disable updates independently of the dashboard. Remove the setting or set it to false before enabling updates again. The dashboard cannot override this local setting.

Inspect the timer and update logs with:

systemctl status loclix-connector-update@ACCOUNT-ID.TUNNEL-ID.timer
journalctl -u loclix-connector-update@ACCOUNT-ID.TUNNEL-ID.service

Configuration is stored under /etc/loclix-connector/ACCOUNT-ID.TUNNEL-ID/. Each connector's executable and license notices are under /var/lib/loclix-connector/ACCOUNT-ID.TUNNEL-ID/.