LinuxForum.Fans
Тема

Сломался yum

Автор: Velland 80 сообщений 22614 просмотров
#271570

уровень дебага поднимали в yum.conf?

#271571
Hrafn написал:
уровень дебага поднимали в yum.conf?
text

[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=0
debuglevel=10
logfile=/var/log/yum.log
exactarch=1
obsoletes=1
gpgcheck=1
plugins=0
installonly_limit=5
bugtracker_url=http://bugs.centos.org/set_project.php?project_id=16&ref=http://bugs.centos.org/bug_report_page.php?category=yum
distroverpkg=centos-release
#271572

после yum update посмотрите, что пишется в yum.log и messages

#271573
Hrafn написал:
что-то у меня уже закончились мысли...
можно конечно попробовать прописать в Centos-Base.repo вместо http - ftp, но не факт, что поможет

Прописал ftp

text

Config time: 0.005
Yum Version: 3.2.29
COMMAND: yum update 
Installroot: /
Setting up Package Sacks

base | 3.7 kB 00:00 base/primary_db 11% [=- ] 0.0 B/s | 527 kB --:-- ETA base/primary_db 24% [===- ] 998 kB/s | 1.1 MB 00:03 ETA base/primary_db 37% [=====- ] 1.0 MB/s | 1.7 MB 00:02 ETA base/primary_db 51% [=======- ] 1.1 MB/s | 2.3 MB 00:02 ETA base/primary_db 58% [========- ] 1.1 MB/s | 2.6 MB 00:01 ETA base/primary_db 64% [=========- ] 1.1 MB/s | 2.9 MB 00:01 ETA base/primary_db 72% [==========- ] 1.1 MB/s | 3.3 MB 00:01 ETA base/primary_db 83% [============ ] 1.1 MB/s | 3.7 MB 00:00 ETA base/primary_db 85% [============- ] 1.1 MB/s | 3.9 MB 00:00 ETA base/primary_db 88% [============= ] 1.0 MB/s | 4.0 MB 00:00 ETA base/primary_db 95% [============== ] 1.0 MB/s | 4.3 MB 00:00 ETA

base/primary_db | 4.5 MB 00:03 Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Please verify its path and try again

#271574

хм, а оставьте включенным только основные репы
сделайте снова

text
yum clean all

и

text
yum update
#271575
Hrafn написал:
после yum update посмотрите, что пишется в yum.log и messages

В yum ничего не пишет.
И в messages тож ничего

#271576

да, он дебаг похоже на консоль выдает

#271578
Hrafn написал:
хм, а оставьте включенным только основные репы
сделайте снова
text
yum clean all

и

text
yum update

Интересно через ftp грузить

text

Config time: 0.005
Yum Version: 3.2.29
COMMAND: yum update 
Installroot: /
Setting up Package Sacks

base | 3.7 kB 00:00 base/primary_db 7% [= ] 0.0 B/s | 341 kB --:-- ETA base/primary_db 20% [=== ] 970 kB/s | 942 kB 00:03 ETA base/primary_db 33% [===== ] 1.0 MB/s | 1.5 MB 00:02 ETA base/primary_db 46% [======= ] 1.1 MB/s | 2.1 MB 00:02 ETA base/primary_db 59% [========- ] 1.1 MB/s | 2.7 MB 00:01 ETA base/primary_db 62% [========= ] 1.1 MB/s | 2.8 MB 00:01 ETA base/primary_db 67% [========== ] 1.0 MB/s | 3.0 MB 00:01 ETA base/primary_db 76% [=========== ] 1.1 MB/s | 3.4 MB 00:01 ETA base/primary_db 88% [============= ] 1.1 MB/s | 4.0 MB 00:00 ETA base/primary_db 99% [==============-] 1.1 MB/s | 4.5 MB 00:00 ETA

base/primary_db | 4.5 MB 00:03

extras | 3.0 kB 00:00

extras/primary_db | 6.3 kB 00:00

updates | 3.5 kB 00:00 updates/primary_db 25% [===- ] 0.0 B/s | 467 kB --:-- ETA updates/primary_db 58% [========- ] 1.0 MB/s | 1.1 MB 00:00 ETA updates/primary_db 90% [=============- ] 1.0 MB/s | 1.6 MB 00:00 ETA

updates/primary_db | 1.8 MB 00:01 pkgsack time: 7.363 Reading Local RPMDB rpmdb time: 0.000 Setting up Update Process Updating Everything Building updates object up:Obs Init time: 0.082 putting device-mapper-event-libs in simple update putting glibc-devel in simple update putting popt in simple update putting libnih in simple update putting libcap-ng in simple update putting cracklib in simple update putting libstdc++ in simple update putting ipset in complex update putting nss-util in simple update putting pciutils-libs in simple update putting tcp_wrappers-libs in simple update putting libudev in simple update putting expat in simple update putting python-libs in simple update putting bzip2-libs in simple update putting nspr in simple update putting mysql-libs in simple update putting audit-libs in simple update putting libselinux in simple update putting libsepol in simple update putting libblkid in simple update putting xz-libs in simple update putting lvm2-libs in simple update putting iptables-devel in simple update putting plymouth-core-libs in simple update putting libcap in simple update putting libmnl in simple update putting rpm-libs in simple update putting libffi in simple update putting libgomp in simple update putting postgresql-libs in simple update putting fipscheck-lib in simple update putting gpgme in simple update putting ncurses-libs in simple update putting libacl in simple update putting cyrus-sasl-lib in simple update putting pam in simple update putting zlib in simple update putting perl-libs in simple update putting nss-softokn in simple update putting libusb in simple update putting libutempter in simple update putting ustr in simple update putting readline in simple update putting libattr in simple update putting file-libs in simple update putting cloog-ppl in simple update putting gdbm in simple update putting newt in simple update putting python in simple update putting nss-softokn-freebl in simple update putting libuser in simple update putting db4 in simple update putting libuuid in simple update putting libstdc++-devel in simple update putting libgcrypt in simple update putting e2fsprogs-libs in simple update putting libdrm in simple update putting gmp in simple update putting lua in simple update putting libgpg-error in simple update putting krb5-libs in simple update putting libssh2 in simple update putting redhat-logos in simple update putting iptables in simple update putting sqlite in simple update putting pcre in simple update putting libidn in simple update putting libsemanage in simple update putting pth in simple update putting glibc in simple update putting ppl in simple update putting openldap in simple update putting keyutils-libs in simple update putting gamin in simple update putting nss in simple update putting glib2 in simple update putting openssl in simple update putting util-linux-ng in simple update putting dhclient in simple update putting libedit in simple update putting dbus-glib in simple update putting libxml2 in simple update putting dbus-libs in simple update putting mpfr in simple update putting procps in simple update putting device-mapper-libs in simple update putting libaio in simple update putting ipset in complex update putting libss in simple update putting slang in simple update putting elfutils-libelf in simple update putting dhcp-common in simple update putting libgcc in simple update putting libcom_err in simple update putting libcurl in simple update processing ipset processing ipset processing ipset processing ipset up:simple updates time: 0.005 up:obs time: 0.002 up:condense time: 0.000 updates time: 0.203 Not Updating Package that is already updated: redhat-logos.noarch 0:60.0.14-11.el6.centos Not Updating Package that is already updated: dhclient.x86_64 12:4.1.1-31.P1.el6_3.1 Not Updating Package that is already updated: dhcp-common.x86_64 12:4.1.1-31.P1.el6_3.1 Not Updating Package that is already updated: ipset.x86_64 0:6.7-2.el6 Not Updating Package that is already updated: ipset.x86_64 0:6.7-2.el6 Resolving Dependencies --> Running transaction check ---> Package dhclient.x86_64 12:4.1.1-31.P1.el6_3.1 will be updated Checking deps for dhclient.x86_64 12:4.1.1-31.P1.el6_3.1 - ud ---> Package dhclient.x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 will be an update Checking deps for dhclient.x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 - u looking for ('dhcp-common', 'EQ', ('12', '4.1.1', '31.0.1.P1.el6.centos.1')) as a requirement of dhclient.x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 - u ---> Package dhcp-common.x86_64 12:4.1.1-31.P1.el6_3.1 will be updated Checking deps for dhcp-common.x86_64 12:4.1.1-31.P1.el6_3.1 - ud ---> Package dhcp-common.x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 will be an update Checking deps for dhcp-common.x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 - u ---> Package ipset.x86_64 0:6.7-2.el6 will be updated Checking deps for ipset.x86_64 0:6.7-2.el6 - ud ---> Package ipset.x86_64 0:6.11-1.el6 will be an update Checking deps for ipset.x86_64 0:6.11-1.el6 - u looking for ('/sbin/ldconfig', None, (None, None, None)) as a requirement of ipset.x86_64 0:6.11-1.el6 - u looking for ('/sbin/ldconfig', None, (None, None, None)) as a requirement of ipset.x86_64 0:6.11-1.el6 - u ---> Package redhat-logos.noarch 0:60.0.14-11.el6.centos will be updated Checking deps for redhat-logos.noarch 0:60.0.14-11.el6.centos - ud ---> Package redhat-logos.noarch 0:60.0.14-12.el6.centos will be an update Checking deps for redhat-logos.noarch 0:60.0.14-12.el6.centos - u --> Finished Dependency Resolution Dependency Process ending Depsolve time: 1.387

Dependencies Resolved

================================================================================ Package Arch Version Repository Size ================================================================================ Updating: dhclient x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 updates 317 k dhcp-common x86_64 12:4.1.1-31.0.1.P1.el6.centos.1 updates 141 k ipset x86_64 6.11-1.el6 base 61 k redhat-logos noarch 60.0.14-12.el6.centos updates 15 M

Transaction Summary ================================================================================ Upgrade 4 Package(s)

Total download size: 15 M Is this ok [y/N]:

#271581

так обновляйте :)
уровень дебага можно сделать поменьше

#271582

Для EPEL точно также пропишите прямой путь до зеркала яндекса, с ftp
проверим и EPEL

#271583

и надо разбираться, почему через http идут обрывы

#271584

и покажите вывод

text
iptables -L -n -v
#271589
Hrafn написал:
и покажите вывод
text
iptables -L -n -v

text

Chain INPUT (policy DROP 123 packets, 20916 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set fail2ban-WEBMIN src tcp dpt:10002 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set fail2ban-VSFTPD src tcp dpt:21 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set fail2ban-SSH src tcp dpt:22 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           OS fingerprint match NMAP 
    0     0 DROP       icmp -f  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
   85  8556 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
   18  4014 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x11/0x01 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x3F 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            psd weight-threshold: 21 delay-threshold: 300 lo-ports-weight: 3 hi-ports-weight: 1 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 limit: avg 1/sec burst 5 
    0     0 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:0 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:0 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:0 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:0 
  128 21728 GEOIP_REJECT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 21,25,443 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:123 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:7777 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:10002 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 12 
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22  Source country: UA 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
    1    60 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0            tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 STRING match "GET / HTTP" ALGO name kmp TO 1024 recent: SET name: httpddos side: source 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 STRING match "GET / HTTP" ALGO name kmp TO 1024 recent: UPDATE seconds: 10 hit_count: 2 name: httpddos side: source 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:2106 
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:2106 flags:0x17/0x02 #conn/32 > 20 reject-with icmp-port-unreachable 

Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 74 packets, 11138 bytes) pkts bytes target prot opt in out source destination

Chain GEOIP_REJECT (1 references) pkts bytes target prot opt in out source destination 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Source countries: CN,KR,KP,TW reject-with icmp-port-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Source countries: AF,CA,US reject-with icmp-port-unreachable

Chain syn-flood (0 references) pkts bytes target prot opt in out source destination 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 100/sec burst 150 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `SYN flood: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

#271591

Как вариант отключи фаер на время

#271594

как вариант, разобраться с правилами для 80 порта

#271597

Все спасибки) Убрал правила с 80 порта все заработало.

#271599

Не за что
Отметьте тему решенной

#271603
Hrafn написал:
Не за что
Отметьте тему решенной

Не могу найти где.

#271607

если я правильно помню, то при редактировании самого первого сообщения можно это сделать

#271608

Уже находится в разделе решённых тем (этого достаточно).

Войдите или зарегистрируйтесь, чтобы ответить.