Il giorno lun 13 lug 2020 alle ore 16:36 Markus Schaufler <markus.schaufler@digit-all.at> ha scritto:
Hi all,
in our environment, CentOS7 and RHEL7 for the most part (Ovirt 4.3 and RHV 4.3), we are able to set a proxy directly in /etc/yum.conf (or on the single repo) to momentarily bypass some network restrictions.
The proxy settings looks like this:
proxy=http://our-proxy.domain:8080
proxy_username=user
proxy_password=password

But is also works properly when it is set directly from CLI, and this is the one we use more often:
export http_proxy=http://user:password@our-proxy.domain:8080
export https_proxy=https://user:password@our-proxy.domain:8080

We are having difficulties to set the same proxy on CentOS8 / Ovirt 4.4.x.
There is no way the proxy settings allows us to run "yum update".

Extra Packages for Enterprise Linux 8 - x86_64                                                                                                               0.0  B/s |   0  B     00:00
Errors during downloading metadata for repository 'ovirt-4.4-epel':
  - Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT]
Error: Failed to download metadata for repo 'ovirt-4.4-epel': Cannot prepare internal mirrorlist: Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT]

Can somebody maybe point us to a solution? The above command is extracted by 'yum update' after a clean installation of Ovirt 4.4.1-2020070811 (but the same issue happened on previous versions and Nightly versions too).

Looks like you're having some issue validating the SSL certificate served through the proxy.
You can read more about it here https://curl.haxx.se/docs/sslcerts.html
If you have more than 3 hosts I would consider using foreman / satellite smart proxy function (if you don't need more from foreman / satellite)

 

Thank you,
Markus
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/MLC76WBBPVOQO3U57JCBMSWYKQCCJRIZ/


--