Dnf update fails; out-of-date mirror?

dnf update has been failing for me since yesterday (Jan 23), complaining about openssl packages:

$ sudo dnf clean all
87 files removed
$ sudo dnf update
Docker CE Stable - x86_64                                                                                                                     102 kB/s |  35 kB     00:00    
Extra Packages for Enterprise Linux 9 - x86_64                                                                                                3.0 MB/s |  20 MB     00:06    
Extra Packages for Enterprise Linux 9 openh264 (From Cisco) - x86_64                                                                          3.3 kB/s | 2.5 kB     00:00    
google-chrome                                                                                                                                  11 kB/s | 3.5 kB     00:00    
Hashicorp Stable - x86_64                                                                                                                     4.1 MB/s | 1.3 MB     00:00    
Rocky Linux 9 - BaseOS                                                                                                                        3.0 MB/s | 2.2 MB     00:00    
Rocky Linux 9 - AppStream                                                                                                                     1.2 MB/s | 7.4 MB     00:06    
Rocky Linux 9 - CRB                                                                                                                           2.1 MB/s | 2.3 MB     00:01    
Rocky Linux 9 - Extras                                                                                                                         30 kB/s |  14 kB     00:00    
Tailscale stable                                                                                                                               22 kB/s |  13 kB     00:00    
Oracle Linux / RHEL / CentOS-9 / x86_64 - VirtualBox                                                                                           81 kB/s | 100 kB     00:01    
Visual Studio Code                                                                                                                            1.6 MB/s | 2.9 MB     00:01    
Error: 
 Problem 1: cannot install both openssl-libs-1:3.0.7-25.el9_3.x86_64 from baseos and openssl-libs-1:3.0.7-24.el9.x86_64 from @System
  - package openssl-devel-1:3.0.7-24.el9.x86_64 from @System requires openssl-libs(x86-64) = 1:3.0.7-24.el9, but none of the providers can be installed
  - cannot install the best update candidate for package openssl-libs-1:3.0.7-24.el9.x86_64
  - cannot install the best update candidate for package openssl-devel-1:3.0.7-24.el9.x86_64
 Problem 2: package kernel-devel-5.14.0-362.13.1.el9_3.x86_64 from @System requires openssl-devel, but none of the providers can be installed
  - package openssl-devel-1:3.0.7-24.el9.x86_64 from @System requires openssl-libs(x86-64) = 1:3.0.7-24.el9, but none of the providers can be installed
  - package openssl-devel-1:3.0.7-24.el9.x86_64 from appstream requires openssl-libs(x86-64) = 1:3.0.7-24.el9, but none of the providers can be installed
  - cannot install both openssl-libs-1:3.0.7-25.el9_3.x86_64 from baseos and openssl-libs-1:3.0.7-24.el9.x86_64 from @System
  - package openssl-1:3.0.7-25.el9_3.x86_64 from baseos requires openssl-libs(x86-64) = 1:3.0.7-25.el9_3, but none of the providers can be installed
  - cannot install the best update candidate for package openssl-1:3.0.7-24.el9.x86_64
  - cannot install the best update candidate for package kernel-devel-5.14.0-284.30.1.el9_2.x86_64
  - nothing provides openssl-libs(x86-32) = 1:3.0.7-24.el9 needed by openssl-devel-1:3.0.7-24.el9.i686 from appstream
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

I believe the problem is due to out-of-date or mismatched mirror repos. openssl-devel lives in AppStream, while openssl & openssl-libs live in BaseOS. According to /var/log/dnf.librepo.log, i’m getting AppStream from mirror.reenigne.net and BaseOS from rocky-linux-northamerica-northeast1.production.gcp.mirrors.ctrliq.cloud. However, while openssl & openssl-libs have been updated to version 3.0.7-25, openssl-devel hasn’t, at least in the reenigne.net mirror.

Hi,

Looks like it may be related to this:

Regards Tom.

I ended up just blocking mirror.reenigne.net, and now dnf update works.

1 Like