Dotaz: Instalace Centos 4.x v roce 2022

[Petr]

Dobrý den.
Nedaří se mi zprovoznit yum v Centos 4.8, protože havaruju na SSL.
Neřešil to někdo ? Z historických důvodů je potřeba nainstalovat právě tuto verzi

Díky,
Petr

Moje repozitáře

cat /etc/yum.repos.d/CentOS-Base.repo
# CentOS-Base.repo
#
# CentOS-4 is past End of Life ... use at your own risk
#

[base]
name=CentOS-$releasever - Base
baseurl=http://vault.centos.org/4.9/os/$basearch/
gpgcheck=1
gpgkey=http://vault.centos.org/RPM-GPG-KEY-centos4
protect=1
priority=1

#released updates
[update]
name=CentOS-$releasever - Updates
baseurl=http://vault.centos.org/4.9/updates/$basearch/
gpgcheck=1
gpgkey=http://vault.centos.org/RPM-GPG-KEY-centos4
protect=1
priority=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
baseurl=http://vault.centos.org/4.9/addons/$basearch/
gpgcheck=1
gpgkey=http://vault.centos.org/RPM-GPG-KEY-centos4
protect=1
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
baseurl=http://vault.centos.org/4.9/extras/$basearch/
gpgcheck=1
gpgkey=http://vault.centos.org/RPM-GPG-KEY-centos4
protect=1
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
baseurl=http://vault.centos.org/4.9/centosplus/$basearch/
gpgcheck=1
enabled=1
gpgkey=http://vault.centos.org/RPM-GPG-KEY-centos4
protect=1
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
baseurl=http://vault.centos.org/4.9/contrib/$basearch/
gpgcheck=1
enabled=1
gpgkey=http://vault.centos.org/RPM-GPG-KEY-centos4
protect=1
priority=2

Chyba při zavolání yum update

yum clean all
Cleaning up Everything
0 headers removed
0 packages removed
0 metadata files removed
0 cache files removed
0 cache files removed

yum update
Setting up Update Process
Setting up repositories
Traceback (most recent call last):
  File "/usr/bin/yum", line 29, in ?
    yummain.main(sys.argv[1:])
  File "/usr/share/yum-cli/yummain.py", line 97, in main
    result, resultmsgs = do()
  File "/usr/share/yum-cli/cli.py", line 477, in doCommands
    return self.updatePkgs()
  File "/usr/share/yum-cli/cli.py", line 955, in updatePkgs
    self.doRepoSetup()
  File "/usr/share/yum-cli/cli.py", line 71, in doRepoSetup
    yum.YumBase.doRepoSetup(self, thisrepo=thisrepo)
  File "__init__.py", line 233, in doRepoSetup
  File "repos.py", line 671, in getRepoXML
  File "repos.py", line 614, in get
  File "/usr/lib/python2.3/site-packages/urlgrabber/mirror.py", line 411, in urlgrab
    return self._mirror_try(func, url, kw)
  File "/usr/lib/python2.3/site-packages/urlgrabber/mirror.py", line 397, in _mirror_try
    return func_ref( *(fullurl,), **kwargs )
  File "/usr/lib/python2.3/site-packages/urlgrabber/grabber.py", line 784, in urlgrab
    return self._retry(opts, retryfunc, url, filename)
  File "/usr/lib/python2.3/site-packages/urlgrabber/grabber.py", line 702, in _retry
    r = apply(func, (opts,) + args, {})
  File "/usr/lib/python2.3/site-packages/urlgrabber/grabber.py", line 770, in retryfunc
    fo = URLGrabberFileObject(url, filename, opts)
  File "/usr/lib/python2.3/site-packages/urlgrabber/grabber.py", line 893, in __init__
    self._do_open()
  File "/usr/lib/python2.3/site-packages/urlgrabber/grabber.py", line 960, in _do_open
    fo, hdr = self._make_request(req, opener)
  File "/usr/lib/python2.3/site-packages/urlgrabber/grabber.py", line 1055, in _make_request
    fo = opener.open(req)
  File "/usr/lib/python2.3/urllib2.py", line 326, in open
    '_open', req)
  File "/usr/lib/python2.3/urllib2.py", line 306, in _call_chain
    result = func(*args)
  File "/usr/lib/python2.3/site-packages/urlgrabber/keepalive.py", line 211, in http_open
    return self.do_open(HTTPConnection, req)
  File "/usr/lib/python2.3/site-packages/urlgrabber/keepalive.py", line 256, in do_open
    return self.parent.error('http', req, r, r.status, r.reason, r.msg)
  File "/usr/lib/python2.3/urllib2.py", line 346, in error
    result = self._call_chain(*args)
  File "/usr/lib/python2.3/urllib2.py", line 306, in _call_chain
    result = func(*args)
  File "/usr/lib/python2.3/urllib2.py", line 472, in http_error_302
    return self.parent.open(new)
  File "/usr/lib/python2.3/urllib2.py", line 326, in open
    '_open', req)
  File "/usr/lib/python2.3/urllib2.py", line 306, in _call_chain
    result = func(*args)
  File "/usr/lib/python2.3/urllib2.py", line 908, in https_open
    return self.do_open(httplib.HTTPS, req)
  File "/usr/lib/python2.3/urllib2.py", line 884, in do_open
    h.endheaders()
  File "/usr/lib/python2.3/httplib.py", line 712, in endheaders
    self._send_output()
  File "/usr/lib/python2.3/httplib.py", line 597, in _send_output
    self.send(msg)
  File "/usr/lib/python2.3/httplib.py", line 564, in send
    self.connect()
  File "/usr/lib/python2.3/httplib.py", line 985, in connect
    ssl = socket.ssl(sock, self.key_file, self.cert_file)
  File "/usr/lib/python2.3/socket.py", line 73, in ssl
    return _realssl(sock, keyfile, certfile)
socket.sslerror: (8, 'EOF occurred in violation of protocol')

---

---

Odpovědi

[Ruža Becelin]

S TLS podle mě neuspěješ. Musíš si nastavit repo, kde není https. Třeba cern má archiv dostupný jen přes http: http://linuxsoft.cern.ch/centos-vault/.
Další variantou je, udělat si vlastní repo mirror a vystavit si ho přes http sám.
Další možnost je rozjet reverzní proxy server, který bude zpřístupňovat https přes http.
Zdar Max

[billgates]

Vyřešeno.
...bylo potřeba najít repozitář, který nedělá redirect z HTTP na HTTPS (vault.centos.org to dělá).

Takže např. tento...

# CentOS-Base.repo
#
# CentOS-4 is past End of Life ... use at your own risk
#

[base]
name=CentOS-$releasever - Base
baseurl=http://linuxsoft.cern.ch/centos-vault/4.9/os/$basearch/
gpgcheck=1
gpgkey=http://linuxsoft.cern.ch/centos-vault/RPM-GPG-KEY-CentOS-4
protect=1
priority=1

#released updates
[update]
name=CentOS-$releasever - Updates
baseurl=http://linuxsoft.cern.ch/centos-vault/4.9/updates/$basearch/
gpgcheck=1
gpgkey=http://linuxsoft.cern.ch/centos-vault/RPM-GPG-KEY-CentOS-4
protect=1
priority=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
baseurl=http://linuxsoft.cern.ch/centos-vault/4.9/addons/$basearch/
gpgcheck=1
gpgkey=http://linuxsoft.cern.ch/centos-vault/RPM-GPG-KEY-CentOS-4
protect=1
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
baseurl=http://linuxsoft.cern.ch/centos-vault/4.9/extras/$basearch/
gpgcheck=1
gpgkey=http://linuxsoft.cern.ch/centos-vault/RPM-GPG-KEY-CentOS-4
protect=1
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
baseurl=http://linuxsoft.cern.ch/centos-vault/4.9/centosplus/$basearch/
gpgcheck=1
enabled=1
gpgkey=http://linuxsoft.cern.ch/centos-vault/RPM-GPG-KEY-CentOS-4
protect=1
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
baseurl=http://linuxsoft.cern.ch/centos-vault/4.9/contrib/$basearch/
gpgcheck=1
enabled=1
gpgkey=http://linuxsoft.cern.ch/centos-vault/RPM-GPG-KEY-CentOS-4
protect=1
priority=2