Connection Runbook

Securely connect to Cloud Mac and build a repeatable remote development workflow

ArmVMS provides dedicated Apple Silicon physical nodes. Choose graphical remote work, command-line access, or automated builds for each task, then manage connection details, project files, and execution records with one consistent checklist.

3 typesAccess methods
5Available regions
1Dedicated physical node
REMOTE RUN SHEET

Pre-connection checklist

Ready
Resource type
Dedicated Apple Silicon physical node
Access paths
Graphical interface / command line / automated tasks
Available regions
Singapore, Japan (Tokyo), South Korea (Seoul), Hong Kong, US East
Before you start
Verify the address, credentials, local network, and project access method
After you finish
Save logs, confirm task status, and exit the session securely
Actual connection details and availability are determined by the live console response ARMVMS / ACCESS
Choose an access method

Choose the entry point for the task instead of forcing every workflow into a remote desktop

Graphical access is best for work requiring continuous visual feedback, the command line for scriptable development tasks, and automated builds for repeatable execution and artifact delivery. You can combine all three, but manage credentials, directories, and logs separately.

Interactive work

Graphical remote work

Ideal for reviewing Xcode projects, running simulations, debugging interfaces, organizing files, and other development tasks that need desktop feedback. Before starting, confirm the display resolution and keyboard layout. When finished, quit applications and close the remote session.

  • Continuous graphical feedback is required
  • Xcode or desktop tools must be used
  • Build and export results need manual confirmation
Scripted tasks

Command-line access

Ideal for installing dependencies, syncing repositories, running tests, reviewing logs, and handling background tasks. Use a fixed working directory for each project, write long-running tasks to log files, and confirm before exiting whether any process should remain active.

  • Commands are repeatable and output can be logged
  • Continuous desktop streaming is unnecessary
  • Suitable for batch processing and remote troubleshooting
Pipeline execution

Automated builds

Ideal for repeatable tests, archive builds, and artifact exports. Use least-privilege identities, provide sensitive values through controlled environment variables or credential mechanisms, and clean up temporary files and unused sessions when the task ends.

  • Execution steps are fixed and verifiable
  • Artifact paths and log locations are clear
  • A cleanup process can run after completion
Prepare for your first connection

Put four sets of information on one checklist before connecting

Most first-connection issues are caused not by the machine itself, but by unverified region, connection address, credential version, or local network conditions. Check the following in order to avoid repeatedly switching clients and retrying.

PRE-FLIGHT CHECK

Four pre-connection checks

  1. 01

    Confirm the node and order

    Verify the order number, region, chip, memory, storage, and rental term in the console. Do not use an old screenshot to identify the current connection target.

  2. 02

    Confirm the connection address and account

    Check the connection address, port, account name, and credential update time character by character. If credentials have been updated, stop using locally stored older versions.

  3. 03

    Check the local network path

    Confirm that the current network allows the target connection, pause tools that may rewrite routes or proxy rules, and avoid entering credentials on untrusted public networks.

  4. 04

    Prepare the project access method

    Decide in advance how repositories, dependency sources, model files, and build artifacts will be transferred, and carry only the data required for the current task.

Credentials belong only in trusted clients

Do not paste passwords, private keys, or tokens into chat histories, public documents, or scripts from unverified sources. When sharing troubleshooting details, provide only sanitized error content.

Record when the issue occurred first

When a connection fails, first record the local time, target node, client system, and complete error message before trying again. Changing several settings at once makes diagnosis harder.

Graphical remote workflow

Complete a desktop work session in four steps, from connection to secure exit

A graphical session is not complete simply because it connects. Confirm that the target is correct, the desktop environment works, and display settings fit the task, then leave a clear runtime status when you exit.

  1. 01

    Start the session

    Get the current connection details from the console and enter the address and account in a trusted client. When host identification information appears for the first time, compare it with the current node details.

  2. 02

    Confirm the desktop environment

    After connecting, verify the node configuration, system time, project directory, and available disk space. Avoid starting work in the wrong directory or on the machine associated with the wrong order.

  3. 03

    Adjust display settings

    Choose a suitable resolution based on your local screen and network conditions, disable unnecessary visual effects, and first use a small file to verify clipboard and file-transfer direction.

  4. 04

    End the session

    Save the project, confirm build status, close tools you no longer need, and exit the remote session. Do not use a forced disconnect instead of saving through the application.

Command-line workflow

Give every directory, task, and log a fixed destination

Command-line connections suit repeatable tasks, but paths, environment variables, and background processes can also leave problems hidden. Split each remote task into five stages: identity confirmation, directory entry, task execution, log retention, and secure exit.

CLI EXECUTION LEDGER

Command-line execution record

Least privilege
IDENTITY

Credential management

Separate credentials for automated and manual operations, restrict file permissions, and regularly remove keys that are no longer used. Never commit private keys to a repository.

WORKDIR

Project directory

Use clear directories for repositories, dependency caches, temporary files, and build artifacts. Before running cleanup commands, confirm the current path and target scope.

PROCESS

Background tasks

Run long tasks in a resumable session and record the process ID, launch arguments, and expected output location to avoid restarting them after a disconnect.

LOG

Log output

Write standard output and error output to clearly named files. Retain the start time, final status, and key version information so failures can be reproduced.

EXIT

Secure exit

Confirm that files are fully written, temporary credentials have been removed, and background task status has been recorded before closing the connection. Do not leave interactive commands waiting for input.

Optimize the development experience

Reserve interactive latency for operations that truly need visuals

Remote development experience depends on screen streaming, file movement, and task organization. These five practices avoid unverified performance claims and focus on reducing repeated transfers, unnecessary refreshes, and directory conflicts.

DISPLAY

Resolution

Choose the lowest suitable resolution that fully displays your development tools. When network conditions change, reduce the visual load first, then determine whether a connection issue exists.

CLIPBOARD

Clipboard

Transfer only necessary text and small content. Check commands in a local text editor before pasting to avoid invisible characters or sensitive values.

CACHE

Dependency cache

Match caches to toolchain and project versions. Record changes after upgrading dependencies; when issues arise, clear the target cache first instead of deleting entire directories indiscriminately.

BUILD PATH

Build directory

Store source code, derived data, archives, and exported artifacts in separate directories to prevent parallel tasks from overwriting or locking the same path.

TRANSFER

Large file transfers

Move models, audio assets, and large artifacts using verifiable, resumable methods whenever possible. After transfer, verify the file size or checksum.

Security baseline

Tighten connection permissions for each task instead of letting them accumulate

A dedicated physical machine means resources are not shared with other tenants, but project credentials, code permissions, script contents, and application configuration remain your responsibility. Recheck access boundaries for every new order and personnel change.

01

Update credentials after the first login

After confirming that the connection works, replace the initial credentials and store the new ones in a controlled tool. Do not continue relying on the original copy in the delivery message.

02

Apply least privilege

Use separate permission boundaries for daily development, automated tasks, and administrative operations. Elevate privileges only when the current step requires it, then exit elevated access immediately.

03

Remove expired keys

When a member leaves a project, a device is replaced, or a task ends, delete unneeded public keys, sessions, and access tokens, and record the scope of the change.

04

Do not store plaintext tokens in scripts

Provide tokens through controlled environment variables or credential workflows. Never echo complete values in logs, and check configuration files and history before committing code.

Troubleshooting common issues

Check one variable at a time and preserve the original error

Work strictly through address, network, credentials, system status, and client settings in that order. Skipping preliminary checks and repeatedly changing clients usually creates more attempts that cannot be compared.

Remote connection troubleshooting order and records
Order Check Verify Record
01 Connection address Whether the target node, address, port, and account come from the current order A sanitized version of the input and the time the error occurred
02 Local network Whether the current network, proxy, routes, and security policies allow the target connection Network type used and the result after switching networks
03 Connection credentials Whether the account name, key permissions, and credential version are correct Credential update time; never record credential contents
04 System status Whether instance status and connection fields return normally in the console Order number, node, and status fields
05 Client settings Whether protocol, display, keyboard, and certificate confirmation settings match Client system, software version, and complete error message
Why can’t I connect even though the address and account are correct?

First confirm that the connection details come from the current order, then check local network, proxy, and routing rules. Record the time and complete error message. Do not change the network, credentials, and client settings at once; change one item at a time to identify what affects the result.

What happens to running tasks after a graphical session disconnects?

A graphical session and a task process are separate states. Whether the task continues depends on how it was started. Run long tasks in a resumable session and write output to logs; after reconnecting, check the process and logs before starting anything again.

What should I check first when the remote desktop becomes slow to respond?

First lower the resolution and unnecessary screen refreshes, then pause large file transfers and check whether the local network has changed. Move installation, synchronization, and build tasks that can run in the command line out of the graphical session to reduce continuous screen streaming.

Get help

A request with actionable details is more effective than repeatedly saying “I can’t connect”

If the steps above do not resolve the issue, include the order, node, client, and error context in the same request. For existing orders, sign in to the console first and submit a linked ticket; for pre-sales questions or login issues, send an email.

Before you submit

Your ticket should include six types of information

  • Order numberUsed to confirm the associated configuration and rental term
  • Node regionSingapore, Japan (Tokyo), South Korea (Seoul), Hong Kong, or US East
  • Client systemLocal system version and the version of the connection software used
  • Time of occurrenceRecord the time zone and state whether the issue is reproducible
  • Error messageInclude the complete original text, not just the final line
  • Sanitized logsRemove passwords, private keys, tokens, and business data

Existing orders

Sign in to the console to view the current status and submit a linked ticket, keeping order details and the issue description in the same conversation.

Ready to connect to your dedicated Cloud Mac?

Choose ArmVMS M4 from $20.7/day, or review the use cases for two configurations across five regions. Actual availability is shown in the live console.