disk-image-create fails to connect to Red Hat yum repositories

Solution In Progress - Updated -

Issue

  • disk-image-create fails to connect to Red Hat yum repositories with error message similar to this one:
2019-11-13 16:49:19.338 | > https://cdn.redhat.com/content/dist/rhel/server/7/7Server//openstack/13/os/repodata/repomd.xml: [Errno 14] curl#60 - "Peer's certificate issuer has been marked as not trusted by the user."
2019-11-13 16:49:19.338 | > Trying other mirror.
2019-11-13 16:49:19.338 | > It was impossible to connect to the Red Hat servers.
2019-11-13 16:49:19.338 | > This could mean a connectivity issue in your environment, such as the requirement to configure a proxy,
2019-11-13 16:49:19.338 | > or a transparent proxy that tampers with TLS security, or an incorrect system clock.
2019-11-13 16:49:19.338 | > Please collect information about the specific failure that occurs in your environment,
2019-11-13 16:49:19.338 | > using the instructions in: https://access.redhat.com/solutions/1527033 and open a ticket with Red Hat Support.
2019-11-13 16:49:19.338 | > 
2019-11-13 16:49:19.338 | > 
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >  One of the configured repositories failed (added from: https://cdn.redhat.com/content/dist/rhel/server/7/7Server//openstack/13/os),
2019-11-13 16:49:19.339 | >  and yum doesn't have enough cached data to continue. At this point the only
2019-11-13 16:49:19.339 | >  safe thing yum can do is fail. There are a few ways to work "fix" this:
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      1. Contact the upstream for the repository and get them to fix the problem.
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      2. Reconfigure the baseurl/etc. for the repository, to point to a working
2019-11-13 16:49:19.339 | >         upstream. This is most often useful if you are using a newer
2019-11-13 16:49:19.339 | >         distribution release than is supported by the repository (and the
2019-11-13 16:49:19.339 | >         packages for the previous distribution release still work).
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      3. Run the command with the repository temporarily disabled
2019-11-13 16:49:19.339 | >             yum --disablerepo=cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os ...
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      4. Disable the repository permanently, so yum won't use it by default. Yum
2019-11-13 16:49:19.339 | >         will then just ignore the repository until you permanently enable it
2019-11-13 16:49:19.339 | >         again or use --enablerepo for temporary usage:
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >             yum-config-manager --disable cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os
2019-11-13 16:49:19.339 | >         or
2019-11-13 16:49:19.339 | >             subscription-manager repos --disable=cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      5. Configure the failing repository to be skipped, if it is unavailable.
2019-11-13 16:49:19.339 | >         Note that yum will try to contact the repo. when it runs most commands,
2019-11-13 16:49:19.339 | >         so will have to try and fail each time (and thus. yum will be be much
2019-11-13 16:49:19.339 | >         slower). If it is a very temporary problem though, this is often a nice
2019-11-13 16:49:19.339 | >         compromise:
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >             yum-config-manager --save --setopt=cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os.skip_if_unavailable=true
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.388 | > failure: repodata/repomd.xml from cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os: [Errno 256] No more mirrors to try.
2019-11-13 16:49:19.388 | > https://cdn.redhat.com/content/dist/rhel/server/7/7Server//openstack/13/os/repodata/repomd.xml: [Errno 14] curl#60 - "Peer's certificate issuer has been marked as not trusted by the user."

or this one:

2019-11-13 19:18:53.625 | Setting up Package Sacks
2019-11-13 19:18:53.905 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/extras/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:53.905 | Trying other mirror.
2019-11-13 19:18:53.905 | To address this issue please refer to the below knowledge base article
2019-11-13 19:18:53.905 | 
2019-11-13 19:18:53.905 | https://access.redhat.com/solutions/69319
2019-11-13 19:18:53.906 | 
2019-11-13 19:18:53.906 | If above article doesn't help to resolve this issue please open a ticket with Red Hat Support.
2019-11-13 19:18:53.906 | 
2019-11-13 19:18:54.026 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/openstack/13/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:54.026 | Trying other mirror.
2019-11-13 19:18:54.147 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/optional/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:54.147 | Trying other mirror.
2019-11-13 19:18:55.243 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rh-common/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:55.243 | Trying other mirror.
2019-11-13 19:18:55.360 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rhceph-tools/3/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:55.361 | Trying other mirror.
2019-11-13 19:18:55.486 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:55.486 | Trying other mirror.
2019-11-13 19:18:56.560 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/highavailability/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:56.561 | Trying other mirror.
2019-11-13 19:18:56.563 | Checking for virtual provide or file-provide for iscsi-initiator-utils

Environment

  • Red Hat OpenStack Platform 13.0 (RHOSP)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content