Some out-of-sync mirrors

[Michael Riss]

Hello mirror team!

While searching for mirrors on
https://admin.fedoraproject.org/mirrormanager/ for Fedora 26
I stumbled across some out-of-sync mirrors:

http://ftp.uma.es/mirror/fedora/linux/updates only contains updates
up to Fedora 25.

http://ftp.udl.es/pub/fedora/linux/updates only contains updates up
to Fedora 23.

http://ftp.cica.es/fedora/linux/updates/26/x86_64/repodata contains
updates for Fedora 26, but they are stuck at the state of the 4th of
December 2017 - quite nasty from a security point of view.

It was recommended to me to report such mirrors on this list
(https://forums.fedoraforum.org/showthread.php?317398-Fedora-Mirrors-and-k...).

I hope it helps and that you can get them unstuck.


Best regards,
Michael

[Adrian Reber]

On Sun, Feb 25, 2018 at 07:45:07PM +0100, Michael Riss wrote:
>  While searching for mirrors on
>  https://admin.fedoraproject.org/mirrormanager/ for Fedora 26
>  I stumbled across some out-of-sync mirrors:
>  
>  http://ftp.uma.es/mirror/fedora/linux/updates only contains updates
>  up to Fedora 25.
>  
>  http://ftp.udl.es/pub/fedora/linux/updates only contains updates up
>  to Fedora 23.
>  
>  http://ftp.cica.es/fedora/linux/updates/26/x86_64/repodata contains
>  updates for Fedora 26, but they are stuck at the state of the 4th of
>  December 2017 - quite nasty from a security point of view.
>  
>  It was recommended to me to report such mirrors on this list
>
> (https://forums.fedoraforum.org/showthread.php?317398-Fedora-Mirrors-and-k...).
>  
>  I hope it helps and that you can get them unstuck. 
Thanks for your report and for looking so closely at the mirrors.

The mirrorlist (https://admin.fedoraproject.org/mirrormanager/) you
mentioned is, however, not really authoritative. This is a list,
generated once a day, to give an overview. The actual data is generated
every hour and made available via the mirrorlist/metalink interface:

$ curl
'http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f25&arch=x86_64&country=es'
 
# repo = updates-released-f25 arch = x86_64 country = ES 
http://ftp.cica.es/fedora/linux/updates/25/x86_64/
http://mirror.uv.es/mirror/fedora/linux/updates/25/x86_64/

ftp.udl.es is not returned for clients in Spain. So that seems correct:

$ curl
'http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f26&arch=x86_64&country=es'
 
# repo = updates-released-f26 arch = x86_64 country = ES 
http://ftp.cica.es/fedora/linux/updates/26/x86_64/
http://mirror.uv.es/mirror/fedora/linux/updates/26/x86_64/

But, this is not correct, because ftp.cica.es is not updated for
over 2 months. Putting ftp.cica.es in CC to let them know that
there mirror is stuck.

But as we are using metalinks for DNF to find updates, DNF will just
skip ftp.cica.es as the checksums of the repomd.xml file on that mirror
are different than specified in the metalink.

So thanks, for finding the outdated mirrors, but our tools should
handle this, hopefully, so that the users will get re-directed to up
to date mirrors.

		Adrian

[Soporte CICA]

El 25/02/18 a las 20:46, Adrian Reber escribió:
>  Thanks for your report and for looking so closely at the mirrors.
>
>  The mirrorlist (https://admin.fedoraproject.org/mirrormanager/) you
>  mentioned is, however, not really authoritative. This is a list,
>  generated once a day, to give an overview. The actual data is generated
>  every hour and made available via the mirrorlist/metalink interface:
>
>  $ curl
> 'http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f25&arch=x86_64&country=es'
>  # repo = updates-released-f25 arch = x86_64 country = ES
>  http://ftp.cica.es/fedora/linux/updates/25/x86_64/
>  http://mirror.uv.es/mirror/fedora/linux/updates/25/x86_64/
>
>  ftp.udl.es is not returned for clients in Spain. So that seems correct:
>
>  $ curl
> 'http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f26&arch=x86_64&country=es'
>  # repo = updates-released-f26 arch = x86_64 country = ES
>  http://ftp.cica.es/fedora/linux/updates/26/x86_64/
>  http://mirror.uv.es/mirror/fedora/linux/updates/26/x86_64/
>
>  But, this is not correct, because ftp.cica.es is not updated for
>  over 2 months. Putting ftp.cica.es in CC to let them know that
>  there mirror is stuck.
>
>  But as we are using metalinks for DNF to find updates, DNF will just
>  skip ftp.cica.es as the checksums of the repomd.xml file on that mirror
>  are different than specified in the metalink.
>
>  So thanks, for finding the outdated mirrors, but our tools should
>  handle this, hopefully, so that the users will get re-directed to up
>  to date mirrors.
>
>  		Adrian 
Thank you for reporting us this problem. It seems that our upstream 
mirror (http://archive.linux.duke.edu/) is outdated:

  * http://archive.linux.duke.edu/fedora/pub/fedora/linux/updates/26/

We are synchronizing now against another server to update all packages.

Greetings.

-- 
Ignacio Bocanegra Gondán
Administrador de Sistemas y Supercomputación

Servicio de Operación de Sistemas y Redes para el CICA
Centro Informático Científico de Andalucía
AV. Reina Mercedes S/N , Edificio CICA, 41012 Sevilla.
Teléfono: 955 130 384

[Michael Riss]

Great! ftp.cica.es works for me again. Thanks!


On 03/01/2018 12:46 PM, Soporte CICA wrote:
>  El 25/02/18 a las 20:46, Adrian Reber escribió:
> > Thanks for your report and for looking so closely at the mirrors.
> >
> > The mirrorlist (https://admin.fedoraproject.org/mirrormanager/) you
> > mentioned is, however, not really authoritative. This is a list,
> > generated once a day, to give an overview. The actual data is generated
> > every hour and made available via the mirrorlist/metalink interface:
> >
> > $ curl
> 'http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f25&arch=x86_64&country=es'
>  
> > # repo = updates-released-f25 arch = x86_64 country = ES 
> > http://ftp.cica.es/fedora/linux/updates/25/x86_64/
> > http://mirror.uv.es/mirror/fedora/linux/updates/25/x86_64/
> >
> > ftp.udl.es is not returned for clients in Spain. So that seems correct:
> >
> > $ curl
> 'http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f26&arch=x86_64&country=es'
>  
> > # repo = updates-released-f26 arch = x86_64 country = ES 
> > http://ftp.cica.es/fedora/linux/updates/26/x86_64/
> > http://mirror.uv.es/mirror/fedora/linux/updates/26/x86_64/
> >
> > But, this is not correct, because ftp.cica.es is not updated for
> > over 2 months. Putting ftp.cica.es in CC to let them know that
> > there mirror is stuck.
> >
> > But as we are using metalinks for DNF to find updates, DNF will just
> > skip ftp.cica.es as the checksums of the repomd.xml file on that mirror
> > are different than specified in the metalink.
> >
> > So thanks, for finding the outdated mirrors, but our tools should
> > handle this, hopefully, so that the users will get re-directed to up
> > to date mirrors.
> >
> > 		Adrian
>  
>  Thank you for reporting us this problem. It seems that our upstream
>  mirror (http://archive.linux.duke.edu/) is outdated:
>  
>    * http://archive.linux.duke.edu/fedora/pub/fedora/linux/updates/26/
>  
>  We are synchronizing now against another server to update all packages.
>  
>  Greetings.
>  
>  -- 
>  Ignacio Bocanegra Gondán
>  Administrador de Sistemas y Supercomputación
>  
>  Servicio de Operación de Sistemas y Redes para el CICA
>  Centro Informático Científico de Andalucía
>  AV. Reina Mercedes S/N , Edificio CICA, 41012 Sevilla.
>  Teléfono: 955 130 384
>