Timeout error using ACS tunnelling support to install/upgrade packages

[Stephen Linsdell]

Hello,

When I use the Open Source Package Management tool in ACS with a tunnelling setup (as my IBM i system has no internet access) I always get these timeout error messages:

Downloading Packages:
ftp://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo/noarch/yum-3.4.3-15.ibmi7.1.noarch.rpm: [Errno 12] Timeout on ftp://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo/noarch/yum-3.4.3-15.ibmi7.1.noarch.rpm: (28, 'Resolving timed out after 30477 milliseconds')
Trying other mirror.

Error Downloading Packages:
yum-3.4.3-15.noarch: failure: noarch/yum-3.4.3-15.ibmi7.1.noarch.rpm from ibm: [Errno 256] No more mirrors to try.

Back in 2018 another user reported this issue but there is no explanation of how it got resolved. Can anyone tell me why the timeouts might be happening? The PC running ACS can ftp to the public.dhe.ibm.com site OK.

Thanks, Stephen Linsdell.

‌

[Jesse G]

Hi, Stephen.

This looks to be a punishment for being an early adopter of the RPM pile on IBM i. Thanks for that! But, your punishment is an old configuration that used ftp as the access mechanism for the repository. We prefer http/https now, and the ACS tunneling requires it.

You will need to edit /QOpenSys/etc/yum/repos.d/ibm.repo

Change this line:
baseurl=ftp://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo

to:

baseurl=https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo

Then you should be ready to go.

[Stephen Linsdell]

Gdday Jesse

Thanks for the suggestion which looked good but alas it didn’t fix the problem.. Anyway I decided to delete the whole RPM and YUM setup in Qopensys as per the instructions. Then I reinstalled with ACS and the bootstrap stage worked OK and 49 packages are installed now. However when I click on Available Packages or Updates Available I get a red error message saying: ERROR: Error: Cannot retrieve repository metadata (repomd.xml) for repository.

The ACS PC can do https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo in a browser OK and get a directory listing.

Any idea what the issue is?

Thanks,

Stephen

[Robert Brown]

I am experiencing a similar error, but there is a curl error instead of a time out error

https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo/repodata/repomd.xml: [Errno 14] curl#35 - "error:0609D09C:digital envelope routines:INT_CTX_NEW:unsupported algorithm"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: ibm. Please verify its path and try again

My ibm.repo file looks ok

[ibm]
name=ibm
baseurl=https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo
enabled=1
gpgcheck=0
sslverify=0

I verified that I am able to ping 8.8.8.8

PING reply 1 from 8.8.8.8 took 11 ms. 256 bytes. TTL 117.

I get an error using ACS to display update and available packages as well

‌

[Kevin Adler]

@Stephen Linsdell ‘Resolving timed out after 30477 milliseconds’ sounds like a DNS issue on your IBM i system.

‌

@Robert Brown this looks like a different problem, please open a separate issue

[Andrew Smith]

This looks like your yum.conf file is missing a proxy setting, or you’re not tunneling from your local session.

If your i doesn’t have direct access to the internet, can you set a proxy server instead?

Check the proxy settings (if they even exist) in /QOpenSys/etc/yum/yum.conf

It sounds like your i can’t get to the internet anyway.

‌

[Jesse G]

@Stephen Linsdell , are you still having issues with this? You can also try going to “View->Proxy Information” which may (or may not) have useful information. IBM Support should also be able to help problem determination.

[Stephen Linsdell]

I still can’t do anything with the Open Source Package Management in the problem LPAR. Since opening this item I have created another LPAR on the same system and the ssl tunnelling is working just fine with it. So the networking side of things must be OK. Is there a simple way to delete/reset the open source info on the problem LPAR so that it thinks it has never been used so I can start the install process again?

Thanks, Stephen.

[Stephen Linsdell]

I have got the Open Source Package Management working in my LPAR though I did a number of things including changing a DNS and rebuilding the RPM database so I’m not sure what fixed it.