[user@fedora-31-work ~]$ sudo dnf --releasever=fedora-31 distro-sync --best --allowerasing
Fedora Modular fedora-31 - x86_64 4.4 kB/s | 63 kB 00:14
Errors during downloading metadata for repository 'fedora-modular':
- Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-fedora-31&arch=x86_64 (IP: 127.0.0.1)
Error: Failed to download metadata for repo 'fedora-modular': Cannot prepare internal mirrorlist: Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-fedora-31&arch=x86_64 (IP: 127.0.0.1)
sudo qvm-copy /home/user
sudo qvm-copy /rw
/Sven
- Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-fedora-31&arch=x86_64 (IP: 127.0.0.1)
Error: Failed to download metadata for repo 'fedora-modular': Cannot prepare internal mirrorlist: Status code: 404 for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-fedora-31&arch=x86_64 (IP: 127.0.0.1)
[user@fedora-31-work ~]$ sudo dnf clean all
53 files removed
[user@fedora-31-work ~]$ sudo dnf --releasever=31 distro-sync --best --allowerasing
Fedora Modular 31 - x86_64 0.0 B/s | 0 B 03:18
Errors during downloading metadata for repository 'fedora-modular':
- Curl error (35): SSL connect error for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-31&arch=x86_64 [OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to mirrors.fedoraproject.org:443 ]
- Curl error (28): Timeout was reached for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-31&arch=x86_64 [Operation timed out after 30000 milliseconds with 0 out of 0 bytes received]
- Curl error (28): Timeout was reached for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-31&arch=x86_64 [Operation timed out after 30001 milliseconds with 0 out of 0 bytes received]
Error: Failed to download metadata for repo 'fedora-modular': Cannot prepare internal mirrorlist: Curl error (28): Timeout was reached for https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-31&arch=x86_64 [Operation timed out after 30000 milliseconds with 0 out of 0 bytes received]
[user@fedora-31-work ~]$
The purist idea is:
- templates are never connected to a netvm
- you never run any programs in a template (except dnf)
Your actual issue above can be solved by temporarily giving your template
sys-firewall as a netvm for update process. My reading is that the
upgrade process needs to accress mirrors.fedoraproject.org and can't do
so through the UpdateProxy.
This is maybe a security risk, but a rather small one from my
perspective. But I don't know you thread model, nor which attacks this
would enable.
If you go this way, don't forget to remove the netvm access again after
the upgrade.
/Sven
- - when you just check for updates in your fedora-30-work template ...
what happens? does it work normally?
- - please compare 'qvm-features fedora-30-work' with 'qvm-features
fedora-31-work'
dnf --releasever=<new> distro-sync --best --allowerasing
CLI way: simply set 'enabled=0' in /etc/yum.repos.d/fedora-modular.repo (TemplateVM :) )
Unless you have specific needs for modular itself, we disable them by default in builds because we don't need them. So if you don't, simply disable them. Unfortunately, this is a recurrent problem with modular repos which are subject to very unstable behavior.
name=Fedora Modular $releasever - $basearch
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Modular/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-$releasever&arch=$basearch
enabled=1
#metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
[fedora-modular-debuginfo]
name=Fedora Modular $releasever - $basearch - Debug
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Modular/$basearch/debug/tree/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-debug-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
[fedora-modular-source]
name=Fedora Modular $releasever - Source
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Modular/source/tree/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-modular-source-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False