# Failed to connect to download.docker.com port 443: Connection timed out **URL:** \ **Category:** Rocky Linux Help & Support\ **Tags:** rocky-linux-9\ **Created:** [August 7, 2024, 1:59pm UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364 "2024-08-07T13:59:25Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 7, 2024, 1:59pm UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/1 "2024-08-07T13:59:25Z")
[root@master ~]# dnf -y update Manticore Repository 5.2 kB/s | 3.0 kB 00:00 Manticore Repository 71 kB/s | 121 kB 00:01 Docker CE Stable - aarch64 0.0 B/s | 0 B 01:00 Errors during downloading metadata for repository ‘docker-ce-stable’: - Curl error (28): Timeout was reached for [https://download.docker.com/linux/centos/9/aarch64/stable/repodata/repomd.xml](https://download.docker.com/linux/centos/9/aarch64/stable/repodata/repomd.xml) [Failed to connect to [download.docker.com](http://download.docker.com) port 443: Connection timed out] Error: Failed to download metadata for repo ‘docker-ce-stable’: Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried [root@master ~]# [root@node1 ~]# dnf -y update Rocky Linux 9 - BaseOS 3.9 kB/s | 4.1 kB 00:01 Rocky Linux 9 - BaseOS 937 kB/s | 2.3 MB 00:02 Rocky Linux 9 - AppStream 4.5 kB/s | 4.5 kB 00:00 Rocky Linux 9 - AppStream 4.4 MB/s | 7.0 MB 00:01 Rocky Linux 9 - Extras 22 kB/s | 2.9 kB 00:00 Rocky Linux 9 - Extras 48 kB/s | 15 kB 00:00 Error: Problem: package kmod-kvdo-8.2.3.3-117.el9.aarch64 from baseos conflicts with kernel-64k provided by kernel-64k-5.14.0-362.18.1.el9\_3.0.1.aarch64 from @System - cannot install the best update candidate for package kmod-kvdo-8.2.1.6-102.el9\_3.aarch64 - problem with installed package kernel-64k-5.14.0-362.18.1.el9\_3.0.1.aarch64 (try to add ‘–allowerasing’ to command line to replace conflicting packages or ‘–skip-broken’ to skip uninstallable packages or ‘–nobest’ to use not only best candidate packages) [root@node1 ~]# How can I fix it? Thanks ---
**Author:** ![hs303](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@hs303](https://forums.rockylinux.org/u/hs303)\ **Post date:** [August 7, 2024, 3:30pm UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/2 "2024-08-07T15:30:57Z")
Did you try to manually reach it from the shell? ```bash user@host: ~$ curl https://download.docker.com/linux/centos/9/aarch64/stable/repodata/repomd.xml ``` If you cannot reach it, the problem could lie on your network setup, probably the firewall. ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 8, 2024, 1:10am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/3 "2024-08-08T01:10:16Z")
Thanks for your help, I can reach it, how can I instead of it [root@master ~]# curl [https://download.docker.com/linux/centos/9/aarch64/stable/repodata/repomd.xml](https://download.docker.com/linux/centos/9/aarch64/stable/repodata/repomd.xml) curl: (7) Failed to connect to [download.docker.com](http://download.docker.com) port 443: Connection refused [root@master ~]# ---
**Author:** ![hs303](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@hs303](https://forums.rockylinux.org/u/hs303)\ **Post date:** [August 8, 2024, 2:29am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/4 "2024-08-08T02:29:00Z")
So your connection gets rejected at some point. I would check the following: - Are you on a corporate network? If so, you should check if the firewall is blocking the connection. - If someone else has configured the box very restrictively, it could be your `firewalld` or `nftables` blocking it - Theoretically [download.docker.com](http://download.docker.com) could be geoblocking, but I do not think they do. Traceroute may be helpful `traceroute`: ```bash [hs303@rocky ~]$ sudo traceroute -T -p 443 download.docker.com ``` ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 8, 2024, 7:32am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/5 "2024-08-08T07:32:59Z")
"traceroute -T -p 443 [download.docker.com](http://download.docker.com) " it does not work, I tried to switch different network environment, it has same result, I think it was blocked by China firewall. ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 15, 2024, 9:46am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/6 "2024-08-15T09:46:52Z")
[root@master ~]# ip a 1: lo: \ mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid\_lft forever preferred\_lft forever inet6 ::1/128 scope host valid\_lft forever preferred\_lft forever 2: ens160: \ mtu 1500 qdisc fq\_codel state UP group default qlen 1000 link/ether 00:0c:29:ab:ae:6f brd ff:ff:ff:ff:ff:ff altname enp2s0 inet 172.16.62.200/24 brd 172.16.62.255 scope global noprefixroute ens160 valid\_lft forever preferred\_lft forever inet6 fe80::20c:29ff:feab:ae6f/64 scope link noprefixroute valid\_lft forever preferred\_lft forever 3: docker0: \ mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:f1:0a:09:48 brd ff:ff:ff:ff:ff:ff inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 valid\_lft forever preferred\_lft forever [root@master ~]# I found docker0 link state is down, I restart docker service but it is good, dnf update still failed ---
**Author:** ![hs303](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@hs303](https://forums.rockylinux.org/u/hs303)\ **Post date:** [August 15, 2024, 11:07am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/7 "2024-08-15T11:07:35Z")
> [@rui](#): > > problem with installed package kernel-64k-5.14.0-362.18.1.el9\_3.0.1.aarch64 > (try to add ‘–allowerasing’ to command line to replace conflicting packages or ‘–skip-broken’ to skip uninstallable packages or ‘–nobest’ to use not only best candidate packages) I oversaw that there is another problem. One issue being not able to connect to the `docker` repositories, the other one being conflicts between installed kernel module and the installed kernel. ```auto problem with installed package kernel-64k-5.14.0-362.18.1.el9_3.0.1.aarch64 (try to add ‘–allowerasing’ to command line to replace conflicting packages or ‘–skip-broken’ to skip uninstallable packages or ‘–nobest’ to use not only best candidate packages) ``` So maybe to resolve this, try to omit docker updates at first and try to fix the confilcts. The above line basically tells you what are the options. You probably want to go with `-allowerasing` to replace the conflicting packages. ```bash root@node1:~$ dnf --disablerepo=docker --allowerasing update ``` ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 16, 2024, 3:17am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/8 "2024-08-16T03:17:42Z")
> [@hs303](#): > > `dnf --disablerepo=docker --allowerasing update` thanks for your help, I used the command “dnf --disablerepo=docker --allowerasing update”, but the issue still exists, so I disabled docker-ce.repo, and run the command again, it worked for me. ---
**Author:** ![hs303](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@hs303](https://forums.rockylinux.org/u/hs303)\ **Post date:** [August 16, 2024, 8:15am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/9 "2024-08-16T08:15:37Z")
Great! If you want to use the `docker` repos, consider using a proxy. The other option is to use `podman` instead of `docker`. It is natively supported in `RHEL` and is included in the `appstream` repo. To disable the `docker` repo permanently use `dnf config-manager --set-disabled docker-ce.repo`. And please mark this topic as solved. ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 16, 2024, 9:16am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/10 "2024-08-16T09:16:01Z")
Thank you for your assistance, How can I use podman? ---
**Author:** ![hs303](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@hs303](https://forums.rockylinux.org/u/hs303)\ **Post date:** [August 16, 2024, 12:23pm UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/11 "2024-08-16T12:23:56Z")
Just install `podman` with: ```bash user@rocky: ~$ sudo dnf install podman podman-compose ``` You can run `docker` containers with `podman`. `podman` uses mostly the same commands as `docker`. So just give it a try. For more info refer to [What is Podman? — Podman documentation](https://docs.podman.io/en/latest/). ---
**Author:** ![0xC4aE1e5](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/0xc4ae1e5/32/4677_2.png) [@0xC4aE1e5](https://forums.rockylinux.org/u/0xC4aE1e5)\ **Post date:** [August 16, 2024, 11:17pm UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/12 "2024-08-16T23:17:11Z")
China has been blocking Docker lately, it’s probably the word “docker” is getting censored. ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 19, 2024, 3:29am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/13 "2024-08-19T03:29:55Z")
Thank you a lot, I am learning how to use podman. ---
**Author:** ![rui](https://avatars.discourse-cdn.com/v4/letter/r/ba8739/32.png) [@rui](https://forums.rockylinux.org/u/rui)\ **Post date:** [August 20, 2024, 12:55am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/14 "2024-08-20T00:55:44Z")
How can Imark this topic as solved? ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\ **Post date:** [October 19, 2024, 12:55am UTC](https://forums.rockylinux.org/t/failed-to-connect-to-download-docker-com-port-443-connection-timed-out/15364/15 "2024-10-19T00:55:54Z")
Closed on October 19, 2024, 12:55am UTC This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.