Error: Failed to download metadata for repo 'epel': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

[Kaushal Shriyan]

Hi,

I am running Red Hat Enterprise Linux release 8.7 (Ootpa) OS in production
environment.  I have enabled both epel in /etc/yum.repos.d directory

There is a proxy server setup in the network. I have whitelisted the below
wildcard URLs as listed as per epel repo.

https://*.fedoraproject.org

*#cat /etc/yum.repos.d/epel.repo*
[epel]
name=Extra Packages for Enterprise Linux 8 - $basearch
# It is much more secure to use the metalink, but if you wish to use a
local mirror
# place its address here.
#baseurl=https://download.example/pub/epel/8/Everything/$basearch
metalink=
https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=$basearch...
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-8

I have only whitelisted https://*.fedoraproject.org on the http proxy
server. Do I need to whitelist any additional URLs to address the above
issue, or Am I missing anything?

#yum -y install htop
Extra Packages for Enterprise Linux 8 - x86_64

                                                      49  B/s | 3.2 kB
01:05
Errors during downloading metadata for repository 'epel':
  - Curl error (28): Timeout was reached for
https://mirrors.tuna.tsinghua.edu.cn/epel/8/Everything/x86_64/repodata/re...
[Operation
timed out after 30000 milliseconds with 0 out of 0 bytes received]

As you can see, http://mirrors.fedoraproject.org/ choose a random mirror as
per the above output. I did run the below command.

[root@ yum.repos.d]# pwd
/etc/yum.repos.d
[root@ yum.repos.d]# grep -iR tsinghua.edu.cn *
[root@ yum.repos.d]#

I could not see the tsinghua.edu.cn URL in /etc/yum.repos.d.

Please suggest. Thanks in advance

Best Regards,

Kaushal

[Samuel Sieb]

On 9/25/23 23:46, Kaushal Shriyan wrote:
>  I am running Red Hat Enterprise Linux release 8.7 (Ootpa) OS in 
>  production environment.  I have enabled both epel in /etc/yum.repos.d 
>  directory
>  
>  There is a proxy server setup in the network. I have whitelisted the 
>  below wildcard URLs as listed as per epel repo.
>  
>  https://*.fedoraproject.org <http://fedoraproject.org/>
>  
>  _#cat /etc/yum.repos.d/epel.repo_
>  [epel]
>  name=Extra Packages for Enterprise Linux 8 - $basearch
>  # It is much more secure to use the metalink, but if you wish to use a 
>  local mirror
>  # place its address here.
>  #baseurl=https://download.example/pub/epel/8/Everything/$basearch 
>  <https://download.example/pub/epel/8/Everything/$basearch>
>
> metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=...
> <https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=$basearch...
>  
>  I have only whitelisted https://*.fedoraproject.org 
>  <http://fedoraproject.org/> on the http proxy server. Do I need to 
>  whitelist any additional URLs to address the above issue, or Am I 
>  missing anything? 
The metalink link means that dnf will ask the server for a list of 
mirrors to use and any actual downloads will come from those.  You will 
need to whitelist all the possible mirror servers for your region.  Why 
do you have such a restrictive proxy?