Open Source Development

 View Only

 dnf update fails

Philip Krab's profile image
Philip Krab posted Thu January 15, 2026 05:09 AM

Hello Team,

Since the 8th of Januari 2026, dnf fails to update at several of our customers and ends with the messages below.
For the record, AIX is at 7200-05-10-2520, openssl is at level 3.0.16.1000, including the efix from December last year.
There are no python3.9 packages installed. Anyone a solution?

root@SVR-NIM01:/opt/freeware/etc/dnf> # dnf update
AIX generic repository                                                                                                               0.0  B/s |   0  B     02:00
Traceback (most recent call last):
  File "/opt/freeware/bin/dnf", line 57, in <module>
    main.user_main(sys.argv[1:], exit_code=True)
  File "/opt/freeware/lib/python3.12/site-packages/dnf/cli/main.py", line 208, in user_main
    errcode = main(args)
              ^^^^^^^^^^
  File "/opt/freeware/lib/python3.12/site-packages/dnf/cli/main.py", line 67, in main
    return _main(base, args, cli_class, option_parser_class)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/freeware/lib/python3.12/site-packages/dnf/cli/main.py", line 106, in _main
    return cli_run(cli, base)
           ^^^^^^^^^^^^^^^^^^
  File "/opt/freeware/lib/python3.12/site-packages/dnf/cli/main.py", line 122, in cli_run
    cli.run()
  File "/opt/freeware/lib/python3.12/site-packages/dnf/cli/cli.py", line 1098, in run
    self._process_demands()
  File "/opt/freeware/lib/python3.12/site-packages/dnf/cli/cli.py", line 787, in _process_demands
    self.base.fill_sack(
  File "/opt/freeware/lib/python3.12/site-packages/dnf/base.py", line 413, in fill_sack
    self._add_repo_to_sack(r)
  File "/opt/freeware/lib/python3.12/site-packages/dnf/base.py", line 141, in _add_repo_to_sack
    repo.load()
  File "/opt/freeware/lib/python3.12/site-packages/dnf/repo.py", line 574, in load
    ret = self._repo.load()
          ^^^^^^^^^^^^^^^^^
  File "/opt/freeware/lib/python3.12/site-packages/libdnf/repo.py", line 467, in load
    return _repo.Repo_load(self)
           ^^^^^^^^^^^^^^^^^^^^^
libdnf._error.Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Regards,

Philip

SANGAMESH MALLAYYA's profile image
SANGAMESH MALLAYYA posted Fri January 16, 2026 03:58 AM

Hi Philip,

Looks like no data transfer is happening.

Can you check if you are able to connect public.dhe.ibm.com without any issue or having some DNS related issues ?

Philip Krab's profile image
Philip Krab posted Fri January 16, 2026 08:58 AM

I have the issue with three totally different customers in the country on totally different locations (read datacenters). Nothing changed at their side, except for the install of the openssl fix.

root@SVR-NIM01:/root> # emgr -l
 
ID  STATE LABEL      INSTALL TIME      UPDATED BY ABSTRACT
=== ===== ========== ================= ========== ======================================
1    S    301610sa   01/15/26 11:35:31            ifix for openssl CVEs
I deinstalled the fix on one location just to rule that out, but no luck.

wget gives me this:
root@SVR-NIM01:/root> # wget https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/ansible-core/ansible-core-2.19.3-1.aix7.2.noarch.rpm
--2026-01-16 14:49:53--  https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/ansible-core/ansible-core-2.19.3-1.aix7.2.noarch.rpm
Resolving public.dhe.ibm.com... 170.225.119.151
Connecting to public.dhe.ibm.com|170.225.119.151|:443... failed: A remote host did not respond within the timeout period..
Retrying.

curl gives me this:
root@SVR-NIM01:/root> # curl https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc
curl: (28) getsockname() failed with errno 22: A system call received a parameter that is not valid.

Steve Munday's profile image
Steve Munday IBM Champion posted Tue January 20, 2026 04:18 AM

Philip,

Hi, good day to you.

Here's what I see on my NIM:

# oslevel -s
7300-03-00-2446
# openssl version
OpenSSL 3.0.16 11 Feb 2025 (Library: OpenSSL 3.0.16 11 Feb 2025)
# emgr -l | grep CVE
1    S    2466ma               03/28/25 05:27:58            ifix for libcurl CVE
2    S    301610sa             01/20/26 04:13:42            ifix for openssl CVEs
# curl https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">here</a>.</p>
</body></html>

Hope it might shed some light on things for you.

All the best, Steve

Philip Krab's profile image
Philip Krab posted Tue January 20, 2026 06:32 AM

Hi Steve,

Thanks for the input. Here's what I see on another NIM. I'm still in the dark ;-)
# oslevel -s
7200-05-10-2520
# openssl version
OpenSSL 3.0.16 11 Feb 2025 (Library: OpenSSL 3.0.16 11 Feb 2025)
# emgr -l | grep CVE
4    S    301610sa   12/18/25 07:51:41            ifix for openssl CVEs
5    S    61985sa    01/08/26 14:20:44            ifix for OpenSSH CVEs
# curl https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc
curl: (28) getsockname() failed with errno 22: Invalid argument


Steve Munday's profile image
Steve Munday IBM Champion posted Tue January 20, 2026 06:45 AM

Philip,

Hi, here's my "curl" info on the NIM:

# curl --version
curl 8.18.0 (powerpc-ibm-aix7.1.5.0) libcurl/8.18.0 OpenSSL/3.0.16 zlib/1.3.1 libssh2/1.11.1 nghttp2/1.62.1 mit-krb5/1.21.3 OpenLDAP/2.5.16
Release-Date: 2026-01-07
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz NTLM SPNEGO SSL threadsafe UnixSockets
#

Regards, Steve

Philip Krab's profile image
Philip Krab posted Tue January 20, 2026 06:58 AM

Hi Steve. Comparing notes.
# curl --version
curl 8.14.1 (powerpc-ibm-aix7.1.5.0) libcurl/8.14.1 OpenSSL/3.0.16 zlib/1.3.1 libssh2/1.11.1 nghttp2/1.62.1 OpenLDAP/2.5.16
Release-Date: 2025-06-04
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz NTLM SPNEGO SSL threadsafe UnixSockets

Steve Munday's profile image
Steve Munday IBM Champion posted Tue January 20, 2026 07:19 AM

Philip,

Are you able/allowed to update "curl" to see if that helps / resolves things?

Regards, Steve

Philip Krab's profile image
Philip Krab posted Tue January 20, 2026 07:37 AM

Hi Steve,
I think the problem is not solely with curl.
As I said earlier, from one day to the next everything (dnf, wget, curl) stopped working regarding public.dhe.ibm.com at three totally different customers. They have nothing in common, except that they are using AIX (7.1 and 7.2) with aixtoolbox.

Steve Munday's profile image
Steve Munday IBM Champion posted Tue January 20, 2026 07:49 AM

Philip,

Hi, you might like to take a look at

https://stackoverflow.com/questions/59857492/dnf-broken-all-mirrors-were-tried

Just in case it offers up some possible avenues for you.

Regards, Steve

Ayappan P's profile image
Ayappan P posted Tue January 20, 2026 08:01 AM

Does this setup use https_proxy ? If so, make sure it is set up properly and the proxy is up and running. 

Philip Krab's profile image
Philip Krab posted Tue January 20, 2026 12:39 PM

Many thanks for thinking with me Steve and Ayappan. No proxy is involved.


Related Content