Nagios Support Forum

Posted: **Mon Aug 12, 2019 9:50 pm**

OS: CentOS release 6.7 (Final)
Current version: 5.5.11 Enterprise
New version : 5.6.5

After running upgrade command, it is bailing out at this

Code: Select all

Nagios XI Upgrade Log
==========================
DATE: Tue Aug 13 10:44:32 MYT 2019

DISTRO INFO:
CentOS
6.7
x86_64


Archive:  sourceguardian/ixed4.lin.x86-64.zip
  inflating: /usr/lib64/php/modules/ixed.5.3.lin
Sourceguardian extension found for PHP version 5.3
Sourceguardian extension already in php.ini
Stopping httpd:                                            [  OK  ]
Starting httpd: httpd: Could not reliably determine the server's fully qualified domain name, using 172.29.2.75 for ServerName
                                                           [  OK  ]
Checking required prereqs...
Please wait...

Operation timed out after 15000 milliseconds with 0 bytes received
OLD VERSION: 5511
Loaded plugins: fastestmirror
Setting up Update Process
Loading mirror speeds from cached hostfile
Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64 error was
14: problem making ssl connection
 * atomic: mirrors.hosting.in.th
 * base: centos.exabytes.com.my
 * epel: epel.scopesky.iq
 * extras: centos.exabytes.com.my
 * updates: centos.exabytes.com.my
No Packages marked for Update
Loaded plugins: fastestmirror
Setting up Install Process
Loading mirror speeds from cached hostfile
Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64 error was
14: problem making ssl connection
 * atomic: mirrors.hosting.in.th
 * base: centos.exabytes.com.my
 * epel: epel.scopesky.iq
 * extras: centos.exabytes.com.my
 * updates: centos.exabytes.com.my
Resolving Dependencies
--> Running transaction check
---> Package php-imap.x86_64 0:5.4.45-56.el6.art will be installed
--> Processing Dependency: php-common(x86-64) = 5.4.45-56.el6.art for package: php-imap-5.4.45-56.el6.art.x86_64
--> Processing Dependency: libc-client.so.2007()(64bit) for package: php-imap-5.4.45-56.el6.art.x86_64
--> Running transaction check
---> Package libc-client.x86_64 0:2007e-11.el6.art will be installed
---> Package php-common.x86_64 0:5.3.3-49.el6 will be updated
--> Processing Dependency: php(api) = 20090626 for package: php-mcrypt-5.3.3-4.el6.x86_64
--> Processing Dependency: php(api) = 20090626 for package: php-mssql-5.3.3-4.el6.x86_64
--> Processing Dependency: php(api) = 20090626 for package: php-pecl-ssh2-0.11.0-7.el6.x86_64
--> Processing Dependency: php(zend-abi) = 20090626 for package: php-mcrypt-5.3.3-4.el6.x86_64
--> Processing Dependency: php(zend-abi) = 20090626 for package: php-mssql-5.3.3-4.el6.x86_64
--> Processing Dependency: php(zend-abi) = 20090626 for package: php-pecl-ssh2-0.11.0-7.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-mbstring-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-gd-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-cli-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-pdo-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-pgsql-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-xml-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-snmp-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-ldap-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-5.3.3-49.el6.x86_64
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-mysql-5.3.3-49.el6.x86_64
---> Package php-common.x86_64 0:5.4.45-56.el6.art will be an update
--> Running transaction check
---> Package php.x86_64 0:5.3.3-49.el6 will be updated
---> Package php.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-cli.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-cli.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-common.x86_64 0:5.3.3-49.el6 will be updated
--> Processing Dependency: php(api) = 20090626 for package: php-pecl-ssh2-0.11.0-7.el6.x86_64
--> Processing Dependency: php(zend-abi) = 20090626 for package: php-pecl-ssh2-0.11.0-7.el6.x86_64
---> Package php-gd.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-gd.x86_64 0:5.4.45-56.el6.art will be an update
--> Processing Dependency: libt1.so.5()(64bit) for package: php-gd-5.4.45-56.el6.art.x86_64
---> Package php-ldap.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-ldap.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-mbstring.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-mbstring.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-mcrypt.x86_64 0:5.3.3-4.el6 will be updated
---> Package php-mcrypt.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-mssql.x86_64 0:5.3.3-4.el6 will be updated
---> Package php-mssql.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-mysql.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-mysql.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-pdo.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-pdo.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-pgsql.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-pgsql.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-snmp.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-snmp.x86_64 0:5.4.45-56.el6.art will be an update
---> Package php-xml.x86_64 0:5.3.3-49.el6 will be updated
---> Package php-xml.x86_64 0:5.4.45-56.el6.art will be an update
--> Running transaction check
---> Package php-common.x86_64 0:5.3.3-49.el6 will be updated
--> Processing Dependency: php(api) = 20090626 for package: php-pecl-ssh2-0.11.0-7.el6.x86_64
--> Processing Dependency: php(zend-abi) = 20090626 for package: php-pecl-ssh2-0.11.0-7.el6.x86_64
---> Package t1lib.x86_64 0:5.1.2-6.el6_2.1 will be installed
--> Finished Dependency Resolution
Error: Package: php-pecl-ssh2-0.11.0-7.el6.x86_64 (@epel)
           Requires: php(zend-abi) = 20090626
           Removing: php-common-5.3.3-49.el6.x86_64 (@base)
               php(zend-abi) = 20090626
           Updated By: php-common-5.4.45-56.el6.art.x86_64 (atomic)
               php(zend-abi) = 20100525-x86-64
           Available: atomic-php55-php-common-5.5.31-31.el6.art.x86_64 (atomic)
               php(zend-abi) = 20121212-64
           Available: atomic-php55-php-common-5.5.38-38.el6.art.x86_64 (atomic)
               php(zend-abi) = 20121212-64
           Available: atomic-php56-php-common-5.6.26-40.el6.art.x86_64 (atomic)
               php(zend-abi) = 20131226-64
           Available: atomic-php56-php-common-5.6.31-41.el6.art.x86_64 (atomic)
               php(zend-abi) = 20131226-64
           Available: php-common-5.4.45-54.el6.art.i686 (atomic)
               php(zend-abi) = 20100525-x86-32
Error: Package: php-pecl-ssh2-0.11.0-7.el6.x86_64 (@epel)
           Requires: php(api) = 20090626
           Removing: php-common-5.3.3-49.el6.x86_64 (@base)
               php(api) = 20090626
           Updated By: php-common-5.4.45-56.el6.art.x86_64 (atomic)
               php(api) = 20100412-x86-64
           Available: atomic-php55-php-common-5.5.31-31.el6.art.x86_64 (atomic)
               php(api) = 20121113-64
           Available: atomic-php55-php-common-5.5.38-38.el6.art.x86_64 (atomic)
               php(api) = 20121113-64
           Available: atomic-php56-php-common-5.6.26-40.el6.art.x86_64 (atomic)
               php(api) = 20131106-64
           Available: atomic-php56-php-common-5.6.31-41.el6.art.x86_64 (atomic)
               php(api) = 20131106-64
           Available: php-common-5.4.45-54.el6.art.i686 (atomic)
               php(api) = 20100412-x86-32
 You could try using --skip-broken to work around the problem

Please advice how to solve this problem.
All my other instances running on RHEL 6 no problem to upgrade.

Posted: **Tue Aug 13, 2019 10:21 am**

Hello @rajasegar,

Thanks for posting the log file. It looks like the server is not able to make an ssl connection to the EPEL repo ( similar to this issue ).

If you're running a VM, please take a snapshot as a restore point, then run the following:

Code: Select all

yum clean all
yum update

Then reboot the server and run the upgrade once more. If it fails again, please post the full upgrade log again along with the output of the following command:

Code: Select all

yum repolist

Posted: **Tue Aug 13, 2019 7:29 pm**

benjaminsmith wrote:Hello @rajasegar,

Thanks for posting the log file. It looks like the server is not able to make an ssl connection to the EPEL repo ( similar to this issue ).

If you're running a VM, please take a snapshot as a restore point, then run the following:
Code: Select all
yum clean all
yum update
Then reboot the server and run the upgrade once more. If it fails again, please post the full upgrade log again along with the output of the following command:
Code: Select all
yum repolist

Same problem. I cannot run yum update, getting the same message when running nagios upgrade.
Here is the requested repolist

Code: Select all

[nagios@MYUCBPNAGIAPP01 nagiosxi]$ uname -a
Linux MYUCBPNAGIAPP01 2.6.32-754.17.1.el6.x86_64 #1 SMP Tue Jul 2 12:42:48 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

[nagios@MYUCBPNAGIAPP01 nagiosxi]$ sudo yum --disablerepo=\* --enablerepo=base,updates update
Loaded plugins: fastestmirror
Setting up Update Process
Loading mirror speeds from cached hostfile
 * base: centos.exabytes.com.my
 * updates: centos.exabytes.com.my
No Packages marked for Update

Code: Select all

[nagios@MYUCBPNAGIAPP01 nagiosxi]$ sudo yum repolist
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * atomic: mirrors.hosting.in.th
 * base: centos.exabytes.com.my
 * epel: epel.scopesky.iq
 * extras: centos.exabytes.com.my
 * updates: centos.exabytes.com.my
repo id                                        repo name                                                          status
atomic                                         CentOS / Red Hat Enterprise Linux 6 - atomic                        1,225
base                                           CentOS-6 - Base                                                     6,713
cr                                             CentOS-6 - CR                                                           0
download.mono-project.com_repo_centos_         added from: http://download.mono-project.com/repo/centos/           1,904
epel                                           Extra Packages for Enterprise Linux 6 - x86_64                     12,560
extras                                         CentOS-6 - Extras                                                      46
nagios-base                                    Nagios                                                                173
nagiosxi-deps                                  Nagios XI Dependencies                                                 33
updates                                        CentOS-6 - Updates                                                    559
repolist: 23,213
[nagios@MYUCBPNAGIAPP01 nagiosxi]$

Code: Select all

[nagios@MYUCBPNAGIAPP01 nagiosxi]$ cat /etc/yum.repos.d/epel.repo
[epel]
name=Extra Packages for Enterprise Linux 6 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6

[epel-debuginfo]
name=Extra Packages for Enterprise Linux 6 - $basearch - Debug
#baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch/debug
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-6&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
gpgcheck=1

[epel-source]
name=Extra Packages for Enterprise Linux 6 - $basearch - Source
#baseurl=http://download.fedoraproject.org/pub/epel/6/SRPMS
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-source-6&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
gpgcheck=1
[nagios@MYUCBPNAGIAPP01 nagiosxi]$

Posted: **Wed Aug 14, 2019 10:16 am**

Hello @rajasegar,

All my other instances running on RHEL 6 no problem to upgrade.

Have you made any changes to this sever compared to the others? One thing I noticed in the repo list is the addition of the Atomic Repo.

atomic CentOS / Red Hat Enterprise Linux 6 - atomic 1,225

Looking over the CentOS documentation this is listed as a Known Problem Repo as it will replace many core packages.

However, the main error is the inability to connect over https to the repos. Try running a curl command on both URL's and let me know if you're able to successfully connect over both https and http.

Code: Select all

curl -k -L -v https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64
curl -k -L -v http://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64

If the server is connecting over http but not https, make a backup of the epel.repos file (eg. cp epel.repo epel.repo.backup) , and change the mirrors from https to http, and try running the upgrade again.

Posted: **Wed Aug 14, 2019 10:16 pm**

benjaminsmith wrote:Hello @rajasegar,
All my other instances running on RHEL 6 no problem to upgrade.
Have you made any changes to this sever compared to the others? One thing I noticed in the repo list is the addition of the Atomic Repo.
atomic CentOS / Red Hat Enterprise Linux 6 - atomic 1,225
Looking over the CentOS documentation this is listed as a Known Problem Repo as it will replace many core packages.

However, the main error is the inability to connect over https to the repos. Try running a curl command on both URL's and let me know if you're able to successfully connect over both https and http.
Code: Select all
curl -k -L -v https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64
curl -k -L -v http://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64
If the server is connecting over http but not https, make a backup of the epel.repos file (eg. cp epel.repo epel.repo.backup) , and change the mirrors from https to http, and try running the upgrade again.

There was no changes that I know of.
Both http & https connecting but got some error

Code: Select all

<!--
# either path=, or repo= and arch= must be specified
-->
</metalink>

Code: Select all

[nagios@MYUCBPNAGIAPP01 ~]$ curl -k -L -v http://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64
[1] 27426
[nagios@MYUCBPNAGIAPP01 ~]$ * About to connect() to proxy 172.16.19.95 port 8080 (#0)
*   Trying 172.16.19.95... connected
* Connected to 172.16.19.95 (172.16.19.95) port 8080 (#0)
> GET http://mirrors.fedoraproject.org/metalink?repo=epel-6 HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: mirrors.fedoraproject.org
> Accept: */*
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 OK
< Date: Thu, 15 Aug 2019 03:11:20 GMT
< Server: Apache/2.4.38 (Fedora) mod_wsgi/4.6.4 Python/2.7
< X-Frame-Options: SAMEORIGIN
< X-Xss-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
< Referrer-Policy: same-origin
< Vary: Accept-Encoding
< Content-Type: application/metalink+xml
< AppTime: D=4535
< X-Fedora-ProxyServer: proxy13.fedoraproject.org
< X-Fedora-RequestID: XVTNWM6Fpo4d5OdPTVHUUwAAAoI
< Transfer-Encoding: chunked
< Proxy-Connection: Keep-Alive
< Connection: Keep-Alive
<
<?xml version="1.0" encoding="utf-8"?>
<metalink version="3.0" xmlns="http://www.metalinker.org/" type="dynamic" pubdate="Thu, 15 Aug 2019 03:11:20 GMT" generator="mirrormanager" xmlns:mm0="http://fedorahosted.org/mirrormanager">
<!--
# either path=, or repo= and arch= must be specified
-->
</metalink>
* Connection #0 to host 172.16.19.95 left intact
* Closing connection #0
^C
[1]+  Done                    curl -k -L -v http://mirrors.fedoraproject.org/metalink?repo=epel-6
[nagios@MYUCBPNAGIAPP01 ~]$
[nagios@MYUCBPNAGIAPP01 ~]$ curl -k -L -v https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64
[1] 16291
[nagios@MYUCBPNAGIAPP01 ~]$ * About to connect() to proxy 172.16.19.95 port 8080 (#0)
*   Trying 172.16.19.95... connected
* Connected to 172.16.19.95 (172.16.19.95) port 8080 (#0)
* Establish HTTP proxy tunnel to mirrors.fedoraproject.org:443
> CONNECT mirrors.fedoraproject.org:443 HTTP/1.1
> Host: mirrors.fedoraproject.org:443
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connection established
<
* Proxy replied OK to CONNECT request
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* warning: ignoring value of ssl.verifyhost
* skipping SSL peer certificate verification
* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate:
*       subject: CN=*.fedoraproject.org,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US
*       start date: Feb 01 00:00:00 2017 GMT
*       expire date: May 01 12:00:00 2020 GMT
*       common name: *.fedoraproject.org
*       issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US
> GET /metalink?repo=epel-6 HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: mirrors.fedoraproject.org
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Thu, 15 Aug 2019 03:12:44 GMT
< Server: Apache/2.4.38 (Fedora) mod_wsgi/4.6.4 Python/2.7
< X-Frame-Options: SAMEORIGIN
< X-Xss-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
< Referrer-Policy: same-origin
< Content-Length: 304
< Vary: Accept-Encoding
< Content-Type: application/metalink+xml
< AppTime: D=2916
< X-Fedora-ProxyServer: proxy13.fedoraproject.org
< X-Fedora-RequestID: XVTNrJFTNtc1xKlmiMtBvgAACEs
<
<?xml version="1.0" encoding="utf-8"?>
<metalink version="3.0" xmlns="http://www.metalinker.org/" type="dynamic" pubdate="Thu, 15 Aug 2019 03:12:44 GMT" generator="mirrormanager" xmlns:mm0="http://fedorahosted.org/mirrormanager">
<!--
# either path=, or repo= and arch= must be specified
-->
</metalink>
* Connection #0 to host 172.16.19.95 left intact
* Closing connection #0

Posted: **Wed Aug 14, 2019 10:29 pm**

rajasegar wrote:
benjaminsmith wrote:Hello @rajasegar,
Looking over the CentOS documentation this is listed as a Known Problem Repo as it will replace many core packages.
atomic CentOS / Red Hat Enterprise Linux 6 - atomic 1,225

Problem resolved
1. Renamed atomic.repo to atomic.repo.bak
2. yum clean all
3. yum update
4. ./upgrade

Nagios upgraded successfully.

Thanks Ben for your assistance on this.
You can close this thread.

Posted: **Thu Aug 15, 2019 7:30 am**

Glad to hear it is resolved!

Locking thread

Nagios Support Forum

Upgrade failing - 5.5.11 to 5.6.5

Upgrade failing - 5.5.11 to 5.6.5

Re: Upgrade failing - 5.5.11 to 5.6.5

Re: Upgrade failing - 5.5.11 to 5.6.5

Re: Upgrade failing - 5.5.11 to 5.6.5

Re: Upgrade failing - 5.5.11 to 5.6.5

Re: Upgrade failing - 5.5.11 to 5.6.5

Re: Upgrade failing - 5.5.11 to 5.6.5