Yum stop working for Centos 7

I have centos 7 machine. I tried to run yum update. It always show me this.

Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile epel/x86_64/metalink | 7.5 kB 00:00 * base: centos.exabytes.com.my * epel: sg.fedora.ipserverone.com * extras: centos.exabytes.com.my * updates: centos.exabytes.com.my base | 3.6 kB 00:00 extras | 2.9 kB 00:00 getpagespeed-extras | 26 kB 00:00 https://extras.getpagespeed.com/redh...ta/repomd.xml: [Errno -1] Error importing repomd.xml for getpagespeed-extras: Damaged repomd.xml file Trying other mirror. getpagespeed-extras-noarch | 27 kB 00:00 https://extras.getpagespeed.com/redh...ta/repomd.xml: [Errno -1] Error importing repomd.xml for getpagespeed-extras-noarch: Damaged repomd.xml file Trying other mirror. ius | 1.3 kB 00:00 nginx | 2.9 kB 00:00 ps-80-release-noarch | 2.9 kB 00:00 ps-80-release-x86_64 | 2.9 kB 00:00 tools-release-noarch | 2.9 kB 00:00 tools-release-x86_64 | 2.9 kB 00:00 updates | 2.9 kB 00:00 wazuh_repo | 3.3 kB 00:00 (1/2): extras/7/x86_64/primary_db | 153 kB 00:00 (2/2): tools-release-x86_64/7/primary_db | 44 kB 00:01 167 packages excluded due to repository priority protections Is this ok [y/d/N]: y Downloading packages: geoipupdate-3.1.1-3.el7.x86_64 FAILED https://extras.getpagespeed.com/redh...l7.x86_64.rpm: [Errno 14] HTTPS Error 403 - Forbidden Trying other mirror. To address this issue please refer to the below wiki article https://wiki.centos.org/yum-errors If above article doesn't help to resolve this issue please use https://bugs.centos.org/. Error downloading packages: geoipupdate-3.1.1-3.el7.x86_64: [Errno 256] No more mirrors to try.

I know the protection is due to some changes I did to the repo list cause I wanted to install nginx from its source repo. How to overcome this issue of forbidden etc.

What did you get from the wiki page they linked you to?

Hi Business,
Well i have looked the link.

1. I can confirm I can access internet cause I get ping results to eg. ping google.com works.
2. Secondly I did this commands
yum clean all
rm -rf /var/cache/yum/*

Now when I tried yum update I get this errors.

yum update Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile epel/x86_64/metalink | 7.5 kB 00:00:00 * base: centos.exabytes.com.my * epel: my.fedora.ipserverone.com * extras: centos.exabytes.com.my * updates: centos.exabytes.com.my base | 3.6 kB 00:00:00 extras | 2.9 kB 00:00:00 getpagespeed-extras | 26 kB 00:00:00 https://extras.getpagespeed.com/redh...ta/repomd.xml: [Errno -1] Error importing repomd.xml for getpagespeed-extras: Damaged repomd.xml file Trying other mirror. One of the configured repositories failed (GetPageSpeed packages for Enterprise Linux 7 - x86_64), and yum doesn't have enough cached data to continue. At this point the only safe thing yum can do is fail. There are a few ways to work "fix" this: 1. Contact the upstream for the repository and get them to fix the problem. 2. Reconfigure the baseurl/etc. for the repository, to point to a working upstream. This is most often useful if you are using a newer distribution release than is supported by the repository (and the packages for the previous distribution release still work). 3. Run the command with the repository temporarily disabled yum --disablerepo=getpagespeed-extras ... 4. Disable the repository permanently, so yum won't use it by default. Yum will then just ignore the repository until you permanently enable it again or use --enablerepo for temporary usage: yum-config-manager --disable getpagespeed-extras or subscription-manager repos --disable=getpagespeed-extras 5. Configure the failing repository to be skipped, if it is unavailable. Note that yum will try to contact the repo. when it runs most commands, so will have to try and fail each time (and thus. yum will be be much slower). If it is a very temporary problem though, this is often a nice compromise: yum-config-manager --save --setopt=getpagespeed-extras.skip_if_unavailable=true failure: repodata/repomd.xml from getpagespeed-extras: [Errno 256] No more mirrors to try. https://extras.getpagespeed.com/redh...ta/repomd.xml: [Errno -1] Error importing repomd.xml for getpagespeed-extras: Damaged repomd.xml file

I have tried this command yum-config-manager --save --setopt=getpagespeed-extras.skip_if_unavailable=true but still not working too.

When I access https://extras.getpagespeed.com/redh...ata/repomd.xml, I come to a page that asks me to subscribe to this RPM repository for $10 per month.

I suspect that you don't have the subscription, therefore yum fails.
My recommendation: Remove this repo from /etc/yum.repos.d or subscribe.

If you do have the subscription, talk to the site owner.

On my CentOS 7 desktop:

# yum list nginx
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
Available Packages
nginx.x86_64                                         1:1.16.1-1.el7                                         epel

nginx appears to be available in the epel...

Hi Berndbausch,
Yes I dont have the subscription. I remove the .repo file and the yum update is working. But I still get this message 1 packages excluded due to repository priority protections. Anyway can some one recommend should I go with the getpagespeed as they claim "It’s like NGINX-Plus but it costs only $10/mo and you get a lot more!." Should I purchase it?
.

Hi Scasey,
I have tried before from epel. The problem was I could not setup modsecurity with that version. So thats why I had to swap to the getpagespeed for the nginx with modsecurity but now I realise they charging money too bad.

Originally Posted by newbie14 But I still get this message 1 packages excluded due to repository priority protections.

According to a Serverfault Q&A:

Some packages are held by more than one repository. The priorities plugin choose packages from the highest-priority repository, excluding duplicate entries from other repos.

There is one package that is in more than one of your repos. This is not a problem.

Hi Berndbausch,
Based on the link you suggested I tried this command yum list updates -d3. So I found the issue is cause nginx is also available in epel. Yes I install the original nginx repo thus it overcome the priority.

Config time: 0.176 Yum version: 3.4.3 rpmdb time: 0.000 Building updates object Setting up Package Sacks Loading mirror speeds from cached hostfile epel/x86_64/metalink | 7.0 kB 00:00 * base: centos.exabytes.com.my * epel: my.fedora.ipserverone.com * extras: centos.exabytes.com.my * updates: centos.exabytes.com.my base | 3.6 kB 00:00 extras | 2.9 kB 00:00 ius | 1.3 kB 00:00 nginx | 2.9 kB 00:00 http://repo.percona.com/ps-80/yum/re...ta/repomd.xml: [Errno 14] HTTP Error 503 - Service Unavailable Trying other mirror. ps-80-release-noarch | 2.9 kB 00:00 ps-80-release-x86_64 | 2.9 kB 00:00 http://repo.percona.com/tools/yum/re...ta/repomd.xml: [Errno 14] HTTP Error 503 - Service Unavailable Trying other mirror. http://repo.percona.com/tools/yum/re...ta/repomd.xml: [Errno 14] HTTP Error 503 - Service Unavailable Trying other mirror. http://repo.percona.com/tools/yum/re...ta/repomd.xml: [Errno 14] HTTP Error 503 - Service Unavailable Trying other mirror. tools-release-noarch | 2.9 kB 00:00 tools-release-x86_64 | 2.9 kB 00:00 updates | 2.9 kB 00:00 wazuh_repo | 3.3 kB 00:00 tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#7 - "Failed connect to repo.percona.com:80; Connection refused" Trying other mirror. tools-release-x86_64/7/primary FAILED http://repo.percona.com/tools/yum/re...ry.sqlite.bz2: [Errno 14] curl#56 - "Recv failure: Connection reset by peer" Trying other mirror. --> 1:nginx-1.16.1-1.el7.x86_64 from epel excluded (priority) 1 packages excluded due to repository priority protections pkgsack time: 29.861 up:Obs Init time: 0.448 up:simple updates time: 0.013 upbs time: 0.009 up:condense time: 0.000 updates time: 30.456

I saw another new error "http://repo.percona.com/ps-80/yum/release/7/RPMS/noarch/repodata/repomd.xml". I tried that link but it just shows me like an xml page.

Originally Posted by newbie14 I saw another new error "http://repo.percona.com/ps-80/yum/release/7/RPMS/noarch/repodata/repomd.xml". I tried that link but it just shows me like an xml page.

It looks like it could not be accessed at the time you ran yum. Perhaps a temporary problem.

Hi Berndbausch,
Thank you I hope its a temporary problem. I will mark this as answered ready. But just hoping some body can help to answer on the getspeeed page repo is it worth to pay it or not ?

But just hoping some body can help to answer on the getspeeed page repo is it worth to pay it or not ?

GetPageSpeed maintainer here.

Whether it's worth paying for the repo is based on a few factors. IMHO this goes down to this:

• If you're serious to run NGINX in production and you 1) make use of third party modules (e.g. Brotli, PageSpeed, ModSecurity etc.), and 2) using CentOS/RHEL; and 3) do not want to pay hefty fees for NGINX Plus subscription - it should be absolutely worth it
• It is furthermore worth it if you're using NGINX "mainline" branch - it has far more frequent releases than the "stable" one. If you rely on the custom compilation (as opposed to using repo) and have third-party modules like the ones I mentioned, it means that you need to recompile each and single module in order to update NGINX. Using repo saves a lot of time for those frequent mainline updates (yum update will just get you on the most recent NGINX and the module packages you have installed).

I mostly see those folks subscribing who are serious about running NGINX in production: large-scale startups / bank institutions.

If you 1) don't care much about security 2) OK to custom compile and recompile whenever you need to update NGINX 3) can't afford ten-dollar budget 4) can find the modules you want packaged elsewhere - then probably it's not worth it to pay for the GetPageSpeed repo.

That said, nothing disallows just subscribing once by paying those few dollars, install whatever you need, and unsubscribe at the end of the month.
Whenever updates are needed, re-subscribe. Some folks do it, I don't have any policy against that.

P.S. GetPageSpeed repo is not just about NGINX and its numerous module packages (mind there's also NGINX-MOD package with all the bleeding edge stuff like latest OpenSSL built-in). It started as such, but there's far more packages which are targeting performance/security-oriented software: Varnish stable and a lot of VMODs for it, nghttp2, Fail2ban with IPv6 support, geoipupdate with mmdb2 support, etc. etc.

Some historical background on the matter: I did and do use GetPageSpeed repos in my own line of work (setting up servers for top-notch performance: Magento, Magento 2, Wordpress),
so initially I chose to make those packages freely available, so that both myself and community can benefit each other (getting feedback on when something is broken in regards with packages is vital). However, as things have stabilized and it grew to have packages that I don't always use/need and nobody donated for years (not a single soul, really), although I knew for the fact the repo has been used on thousands of servers worldwide without any complaints,
I had to monetize it to bring enough motivation/support the ongoing development.

The final bit of info: the repo is *free* for CentOS 8 as of this writing

I guess that you may be sit behind corporate proxy/firewall that answer with its own HTML page on your request.
Try wget or curl from server to see the content of file.
Probably you will see "according blah-blah policy your request blocked"