Update issue with NNA

[snapon_admin]

I can't ping it from my PC either, but can get to the site in a browser so ICMP is probably just disabled.

Code: Select all

[root@lisl-ngna-01-pv nagiosna]# cat /etc/yum.repos.d/CentOS-Base.repo
# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client.  You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the 
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#released updates 
[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
#baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
#baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

Nothing new I'm afraid:

Code: Select all

[root@lisl-ngna-01-pv nagiosna]# yum update -v
Loading "fastestmirror" plugin
Config time: 0.018
Yum Version: 3.2.29
rpmdb time: 0.001
Setting up Update Process
Updating Everything
Building updates object
Setting up Package Sacks
Loading mirror speeds from cached hostfile
Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again

[tgriep]

Can you edit this file /etc/yum.repos.d/epel.repo and change these lines from

Code: Select all

mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch

to

Code: Select all

mirrorlist=http://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch

Remove the s from https.

Save the file and see if this fixes it.
If not, some device on your network is blocking the server from updating.
Take a look at the /etc/yum.conf on your XI server. Maybe there are some settings in it that could help.

[snapon_admin]

Oh the s was added by me after the http links failed. Both ways don't work. I also already checked etc/yum.conf on XI and it's identical to the NNA file, that's why this is so maddeningly confusing.

[tgriep]

Try running this to see if you can update the server while disabling the epel repo.

Code: Select all

yum update --disablerepo=epel

Here is another fix I found searching you can try also.

Code: Select all

yum --disablerepo=epel -y update  ca-certificates

Another one it to edit the /etc/epel.repo file, comment out the mirrorlist entry and UN-comment the baseurl entry.
That may work too.

[snapon_admin]

Code: Select all

[root@lisl-ngna-01-pv nagiosna]# yum update --disablerepo=epel                    
Loaded plugins: fastestmirror
Setting up Update Process
Loading mirror speeds from cached hostfile
 * base: centos.host-engine.com
 * extras: centos-mirror.jchost.net
 * updates: centos.mia.host-engine.com
http://centos.host-engine.com/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2001:49f0:6000:405::3: Network is unreachable"
Trying other mirror.
http://centos.hostingxtreme.com/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.atlantic.net/centos/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2607:f170:0:3::10: Network is unreachable"
Trying other mirror.
http://mirror.hostduplex.com/centos/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2605:b780::2: Network is unreachable"
Trying other mirror.
http://mirror.pac-12.org/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.steadfast.net/centos/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2607:f128:1:3::2: Network is unreachable"
Trying other mirror.
http://mirror.symnds.com/CentOS/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.mit.edu/centos/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.tripadvisor.com/centos/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.xmission.com/centos/6.7/os/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2607:fa18:0:3::13: Network is unreachable"
Trying other mirror.
http://centos-mirror.jchost.net/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2604:2d00:3ff::4c08:e489: Network is unreachable"
Trying other mirror.
http://centos.aol.com/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.ancl.hawaii.edu/linux/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2607:f278:4101:12::a: Network is unreachable"
Trying other mirror.
http://mirror.atlanticmetro.net/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2001:1980:510a:1::f: Network is unreachable"
Trying other mirror.
http://mirror.net.cen.ct.gov/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.cmich.edu/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.mit.edu/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.seas.harvard.edu/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirrors.usinternet.com/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2605:8400:0:4::56: Network is unreachable"
Trying other mirror.
ftp://ftp.wallawalla.edu/pub/mirrors/centos/6.7/extras/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://centos.mia.host-engine.com/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2001:49f0:d010:1::4: Network is unreachable"
Trying other mirror.
http://linux.mirrors.es.net/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2001:400:201:6::35: Network is unreachable"
Trying other mirror.
http://mirror.ash.fastserv.com/pub/linux/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.fusioncloud.co/pub/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.hmc.edu/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.san.fastserv.com/pub/linux/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
http://mirror.team-cymru.org/CentOS/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2620:0:6b0::26e5:424a: Network is unreachable"
Trying other mirror.
http://mirror.vtti.vt.edu/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2001:468:c80:2133:0:b0e2:0:9874: Network is unreachable"
Trying other mirror.
http://mirrors.centos.webair.com/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "Failed to connect to 2604:9e00:e::204: Network is unreachable"
Trying other mirror.
ftp://ftp.ussg.iu.edu/linux/centos/6.7/updates/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 7 - "couldn't connect to host"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: updates. Please verify its path and try again

Results are similar with the other command as well. I did this while running a tail -f on our syslog server as well and nothing pops up for this server so it's not being blocked by our firewall's ACL.

[hsmith]

Hm. Can you try something weird for me?

Code: Select all

service ip6tables status

I have no idea if this is relevant, but I'm doing some searching around.

If that's running, attempt to stop it, and try again.

Let me know if that works, otherwise, time to dive deeper into the CentOS forums

[snapon_admin]

Not running. Also, I'm looking at iptables in case there's an issue there and stumbled upon this bit:

Code: Select all

ACCEPT     udp  --  anywhere             anywhere            udp dpt:batman 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:batman 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:batman 

uhhhhh...

[hsmith]

Nah-nah nah-nah nah-nah nah-nah...

Hm.

Let's try to add these lines to your icfg-ethwhatever file we found earlier in the post.:

Code: Select all

IPV6INIT=no
IPV6_AUTOCONF=no

then

Code: Select all

service network restart

[snapon_admin]

No change.

[hsmith]

This server doesn't go through a proxy at all? This really seems like a proxy issue at this point.

Did you make sure you took out all of the proxy configurations if you're not going through one?