ovirt 4.4 installation issues

Hi all, in our environment, CentOS7 and RHEL7 for the most part (Ovirt 4.3 and RHV 4.3), we are able to set a proxy directly in /etc/yum.conf (or on the single repo) to momentarily bypass some network restrictions. The proxy settings looks like this: proxy=http://our-proxy.domain:8080 proxy_username=user proxy_password=password But is also works properly when it is set directly from CLI, and this is the one we use more often: export http_proxy=http://user:password@our-proxy.domain:8080 export https_proxy=https://user:password@our-proxy.domain:8080 We are having difficulties to set the same proxy on CentOS8 / Ovirt 4.4.x. There is no way the proxy settings allows us to run "yum update". Extra Packages for Enterprise Linux 8 - x86_64 0.0 B/s | 0 B 00:00 Errors during downloading metadata for repository 'ovirt-4.4-epel': - Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT] Error: Failed to download metadata for repo 'ovirt-4.4-epel': Cannot prepare internal mirrorlist: Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT] Can somebody maybe point us to a solution? The above command is extracted by 'yum update' after a clean installation of Ovirt 4.4.1-2020070811 (but the same issue happened on previous versions and Nightly versions too). Thank you, Markus

What is the contents of your dnf.conf ? Best Regards, Strahil Nikolov На 13 юли 2020 г. 17:26:42 GMT+03:00, Markus Schaufler <markus.schaufler@digit-all.at> написа:
Hi all, in our environment, CentOS7 and RHEL7 for the most part (Ovirt 4.3 and RHV 4.3), we are able to set a proxy directly in /etc/yum.conf (or on the single repo) to momentarily bypass some network restrictions. The proxy settings looks like this: proxy=http://our-proxy.domain:8080 proxy_username=user proxy_password=password
But is also works properly when it is set directly from CLI, and this is the one we use more often: export http_proxy=http://user:password@our-proxy.domain:8080 export https_proxy=https://user:password@our-proxy.domain:8080
We are having difficulties to set the same proxy on CentOS8 / Ovirt 4.4.x. There is no way the proxy settings allows us to run "yum update".
Extra Packages for Enterprise Linux 8 - x86_64 0.0 B/s | 0 B 00:00 Errors during downloading metadata for repository 'ovirt-4.4-epel': - Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT] Error: Failed to download metadata for repo 'ovirt-4.4-epel': Cannot prepare internal mirrorlist: Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT]
Can somebody maybe point us to a solution? The above command is extracted by 'yum update' after a clean installation of Ovirt 4.4.1-2020070811 (but the same issue happened on previous versions and Nightly versions too).
Thank you, Markus _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/MLC76WBBPVOQO3...

Il giorno lun 13 lug 2020 alle ore 16:36 Markus Schaufler < markus.schaufler@digit-all.at> ha scritto:
Hi all, in our environment, CentOS7 and RHEL7 for the most part (Ovirt 4.3 and RHV 4.3), we are able to set a proxy directly in /etc/yum.conf (or on the single repo) to momentarily bypass some network restrictions. The proxy settings looks like this: proxy=http://our-proxy.domain:8080 proxy_username=user proxy_password=password
But is also works properly when it is set directly from CLI, and this is the one we use more often: export http_proxy=http://user:password@our-proxy.domain:8080 export https_proxy=https://user:password@our-proxy.domain:8080
We are having difficulties to set the same proxy on CentOS8 / Ovirt 4.4.x. There is no way the proxy settings allows us to run "yum update".
Extra Packages for Enterprise Linux 8 - x86_64
0.0 B/s | 0 B 00:00 Errors during downloading metadata for repository 'ovirt-4.4-epel': - Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT] Error: Failed to download metadata for repo 'ovirt-4.4-epel': Cannot prepare internal mirrorlist: Curl error (56): Failure when receiving data from the peer for https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos [Received HTTP code 407 from proxy after CONNECT]
Can somebody maybe point us to a solution? The above command is extracted by 'yum update' after a clean installation of Ovirt 4.4.1-2020070811 (but the same issue happened on previous versions and Nightly versions too).
Looks like you're having some issue validating the SSL certificate served through the proxy. You can read more about it here https://curl.haxx.se/docs/sslcerts.html If you have more than 3 hosts I would consider using foreman / satellite smart proxy function (if you don't need more from foreman / satellite)
Thank you, Markus _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/MLC76WBBPVOQO3...
-- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo@redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*

Thanks Strahil and Sandro for your replies and sorry for the delay. @strahil [main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True skip_if_unavailable=False Which it just is the original dnf.conf. To this, we'd apply the proxy settings written above the question. But we reach the SSL error. @sandro Unfortunately we can not use the smart proxy. We cannot install applications. Katello rpm as an example. We have our Foreman in place and we can download the 'katello-ca-consumer-latest.noarch.rpm' using CURL. But, when trying to install it, 'yum localinstall katello-ca-consumer-latest.noarch.rpm', it requires 'subscription-manager' as dependency package, which is not installed/included in CentOS8/RHEL8 and fails. Foreman is for the moment excluded. It could be interesting to fix the SSL/proxy issue, we haven't yet found how to fix it. Maybe you could address us, please? Thanks
participants (3)
-
Markus Schaufler
-
Sandro Bonazzola
-
Strahil Nikolov