Mozilla repo - redirect to http on a single machine...

English Install/Boot/Login
1

Hi!

I updated several TW this morning (with mozilla repo enabled), but on one install I get errors that no valid metadata is found for the mozilla repo. All installs running fine for months with this setup.

I removed the mozilla repo on the stubborn machine and wanted to reinstall it in YaST (URL: https://download.opensuse.org/repositories/mozilla/openSUSE_Tumbleweed), but when trying to download repo data I get:

Download (curl) error for 'https://download.opensuse.org/repositories/mozilla/openSUSE_Tumbleweed/repodata/1f59575d7022d7f22d675bf9ab18abfb7776a0ec5721536dbd03fc83c21d1a9e-primary.xml.gz':
Error code:  Unsupported protocol
Error message: Redirect to protocol "http" not supported or disabled in libcurl

…apparently the machine tries to downgrade https to http and install of the repo fails.

What’s going on here? :’(

((machine and router rebooted, resolv.conf looking fine…))

2

That resembles typical responses I get for download.opensuse.org’s mozilla repo. I have switched most of my installations to using ftp5.gwdg.de instead for mozilla.

3

Many thanks for quick reply!

That makes thing for me even more disturbing. Who or what is interfering in the https traffic between specific machines (!) and opensuse repos?

I can’t believe that!

I turned of the machine for 1-2 h and then I could add the mozilla repo (again) with the same URL throwing the error given in my first post. And zypper dup is finished in the meantime.

But what does all this mean?

4

Now one install of Leap 15.1 fails with “No metadata found” and says

Valid metadata not found at specified URL
...
Repository "Main Update Repository" is invalid

after doing fine for months. I never edited any of the repositories manually on this machine and they are all http apparently ootb…

5

Repos periodically have these issues,
Try again after several hours.
Or, as described earlier in this thread, configure a different mirror repo.

This happens often enough that it can probably be considered a “feature” of mirror brain,
And therefore one day probably should be addressed…

TSU

6

…never had that on 12+ installs over the last 3(? 4?) years…

7

Hi
There are ongoing issues with the mirrorbrain service (disks filling up etc), which is probably your issue…

Have a read of the Heroes meeting last weekend;

Remember it’s transition time with infrastructure and expect glitches for the next few months until it’s all sorted.

8

Hi Malcolm!

Many thanks for shedding some light on this. I don’t know much about the machine room of suse/opensuse except they were bought by the Wallenberg clan recently…

9

Hi
You can also check the status of all the systems here: https://status.opensuse.org/

Then there is always Issues - openSUSE Project Management Tool

10

Get the s out of that URL. httpS is not supported by the opensuse.org mirror infrastructure.

11

Hi
While technically true, if you look at the mirror list and click on the ‘Heros’ link it automatically redirects to https://provo-mirror.opensuse.org/ :wink:

12

Sorry, me again…

I tried to update a Leap install:

sudo zypper up
[sudo] password for root: 
Loading repository data...
Reading installed packages...

The following item is locked and will not be changed by any action:
 Available:
  avahi

The following 13 packages are going to be upgraded:
  libfreebl3 libfreebl3-hmac libncurses6 libsoftokn3 libsoftokn3-hmac mozilla-nss mozilla-nss-certs ncurses-utils
  supportutils terminfo terminfo-base terminfo-iterm terminfo-screen

13 packages to upgrade.
Overall download size: 3.1 MiB. Already cached: 0 B. After the operation, additional 208.0 B will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving package libfreebl3-3.47.1-lp151.1.2.x86_64                        (1/13), 250.1 KiB (540.6 KiB unpacked)
Retrieving: libfreebl3-3.47.1-lp151.1.2.x86_64.rpm .................................................[error (6 B/s)]
Timeout exceeded when accessing 'http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.1/x86_64/libfreebl3-3.47.1-lp151.1.2.x86_64.rpm'.                                                                                 
Abort, retry, ignore? [a/r/i] (r): 
Trying again...
Retrieving: libfreebl3-3.47.1-lp151.1.2.x86_64.rpm .................................................[error (6 B/s)]
Timeout exceeded when accessing 'http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.1/x86_64/libfreebl3-3.47.1-lp151.1.2.x86_64.rpm'.                                                                                 
Abort, retry, ignore? [a/r/i] (r): 
Trying again...
Retrieving: libfreebl3-3.47.1-lp151.1.2.x86_64.rpm .................................................[error (6 B/s)]
Timeout exceeded when accessing 'http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.1/x86_64/libfreebl3-3.47.1-lp151.1.2.x86_64.rpm'.
Abort, retry, ignore? [a/r/i] (r): 
Trying again...
Retrieving: libfreebl3-3.47.1-lp151.1.2.x86_64.rpm .................................................[error (6 B/s)]
Timeout exceeded when accessing 'http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.1/x86_64/libfreebl3-3.47.1-lp151.1.2.x86_64.rpm'.
Abort, retry, ignore? [a/r/i] (a): 
Trying again...
Problem occurred during or after installation or removal of packages:
Installation has been aborted as directed.
Please see the above error message for a hint.

I can reach

http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_15.1/x86_64/

but when I try to download the libfreebl… the browser times out. No surprise, when I have a look at the address bar:

http://mirror.tspu.ru/opensuse/repositories/mozilla/openSUSE_Leap_15.1/x86_64/libfreebl3-3.47.1-lp151.1.2.x86_64.rpm

…it resolves to a russian server for download and I have country blocking enabled for some contries.

Any way to make that resolve to something located in the middle of Europe?

13

Hi
If you look at the mirrors list, there are only a few ‘repository’ type mirrors (15 worldwide)… my suggestion is to find a provider (eg university) in your locale who would be willing to mirror the huge amount of data for the ‘repositories’, else use a fixed URL for that instead of mirror brain.

14

Many thanks! I thought there might be some

zypper -change-all-repos to other provider

voodoo that allows me to change all rpos on a given machine with a single command. Otherwise it will be a nightmare to change all repos on all machines.

Never had these probems in past, what has changed recently that makes updates so difficult?

15

As the different repos on a system will point to several different repo hosts on the net and a repo host on the net will not have all the repos a system might use, I assume this would not be a very useful addition.

Others have no problems. I seems that it is something particular to your setup.

16

Really?

“My” setup is 99% plain vanilla TW/Leap (sometimes a little packman) as it installs from netinstaller media. So what would be “my” setup in this context?

17

I have no idea (but you have things people normaly do not have, like blocking some top level domains). But look at the threads here. Can you point to other people reporting this?

18

Hi
Because in the past there was only a few (one or two) for the ‘repositories’ including home type repos, now you are faced with additional issues if a mirror your sent to is out of sync, as well as the ongoing rsync issues…

19

Malcolm, thanks for elucidating me… :slight_smile: