[SOLVED] Failed retrieving maboxlinux.db from repo.maboxlinux.org

Hi, all

I have updated the system to refresh databases, as usual,
$ sudo pacman -Syyu
I also applied the commands to refresh mirrors:
$ sudo pacman-mirrors -f5

But I still get this message from repo.maboxlinux.org:

$ pamac upgrade
Preparing...
Synchronizing package databases...
Error: failed retrieving file 'maboxlinux.db' from repo.maboxlinux.org : Connection time-out         
download library error
Failed to synchronize databases
Nothing to do.
Transaction successfully finished.

All other packages not in Mabox repo can be updated without hesitation.

Can someone provide a hint, please?

Can you access repo website at https://repo.maboxlinux.org ?
Can you ping the server?

ping repo.maboxlinux.org

Yes, I do. That’s the funny part.

Can I just grab the database from there, I guess?

I think it would be a better idea to try the update with yay.

yay -Syyu

Done that several times (just in case is a network thing).

Check these messages:

$ yay -Syyu
[sudo] password for simonapetra: 
warning: config file /etc/pacman.conf, line 20: directive 'SyncFirst' in section 'options' not recognized.
:: Synchronizing package databases...
URL transformed to HTTPS due to an HSTS policy
--2024-07-31 14:24:45--  https://repo.maboxlinux.org/stable/x86_64/maboxlinux.db
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving repo.maboxlinux.org (repo.maboxlinux.org)... 5.196.196.149
Connecting to repo.maboxlinux.org (repo.maboxlinux.org)|5.196.196.149|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 18256 (18K) [application/octet-stream]
Saving to: ‘/var/lib/pacman/sync/maboxlinux.db.part’

/var/lib/pacman/sy 100%[==============>]  17.83K  97.2KB/s    in 0.2s    

2024-07-31 14:25:01 (97.2 KB/s) - ‘/var/lib/pacman/sync/maboxlinux.db.part’ saved [18256/18256]

URL transformed to HTTPS due to an HSTS policy
--2024-07-31 14:25:01--  https://repo.maboxlinux.org/stable/x86_64/maboxlinux.db.sig
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving repo.maboxlinux.org (repo.maboxlinux.org)... 5.196.196.149
Connecting to repo.maboxlinux.org (repo.maboxlinux.org)|5.196.196.149|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2024-07-31 14:25:17 ERROR 404: Not Found.

After other messages from the rest of repos, I tried again:

$ pamac update
Preparing...
Synchronizing package databases...
Error: failed retrieving file 'maboxlinux.db' from repo.maboxlinux.org : Connection time-out
download library error
Failed to synchronize databases
Nothing to do.
Transaction successfully finished.

I’ve never seen messages like these…

Try:

rm ~/.wget-hsts 

and

rm /var/lib/pacman/sync/maboxlinux.*

then run yay again.

You could also comment out SyncFirst line from /etc/pacman.conf as it is not used anymore.

The problem is still present :frowning:

Let me give it a try tomorrow. Maybe it’s a CloudFlare (or similar) thing…

Or maybe there is something else, because pamac/pacman tries to retrieve .part files.

Is there some manual way to retrieve the maboxlinux.db?

Thanks for the SyncFirst tip! I read about it, though even with pacman v.6.1.0-7, it’s not gone. I thought it should stay uncommented because maboxlinux was mentioned there.

Hello, everybody

I still have these ugly messages about Mabox signature:

$ yay
:: Synchronizing package databases...
URL transformed to HTTPS due to an HSTS policy
--2024-08-03 13:47:10--  https://repo.maboxlinux.org/stable/x86_64/maboxlinux.db
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving repo.maboxlinux.org (repo.maboxlinux.org)... 5.196.196.149
Connecting to repo.maboxlinux.org (repo.maboxlinux.org)|5.196.196.149|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 18256 (18K) [application/octet-stream]
Saving to: ‘/var/lib/pacman/sync/maboxlinux.db.part’

/var/lib/pacman/sync/m 100%[===========================>]  17.83K  96.2KB/s    in 0.2s    

2024-08-03 13:47:26 (96.2 KB/s) - ‘/var/lib/pacman/sync/maboxlinux.db.part’ saved [18256/18256]

URL transformed to HTTPS due to an HSTS policy
--2024-08-03 13:47:26--  https://repo.maboxlinux.org/stable/x86_64/maboxlinux.db.sig
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving repo.maboxlinux.org (repo.maboxlinux.org)... 5.196.196.149
Connecting to repo.maboxlinux.org (repo.maboxlinux.org)|5.196.196.149|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2024-08-03 13:47:42 ERROR 404: Not Found.

--2024-08-03 13:47:44--  https://ziply.mm.fcix.net/manjaro/stable/core/x86_64/core.db
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ziply.mm.fcix.net (ziply.mm.fcix.net)... 50.47.0.53, 2605:21c0:1000:4a::53
Connecting to ziply.mm.fcix.net (ziply.mm.fcix.net)|50.47.0.53|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 140582 (137K) [application/octet-stream]
Saving to: ‘/var/lib/pacman/sync/core.db.part’

/var/lib/pacman/sync/c 100%[===========================>] 137.29K   775KB/s    in 0.2s    

2024-08-03 13:47:45 (775 KB/s) - ‘/var/lib/pacman/sync/core.db.part’ saved [140582/140582]

--2024-08-03 13:47:45--  https://ziply.mm.fcix.net/manjaro/stable/core/x86_64/core.db.sig
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ziply.mm.fcix.net (ziply.mm.fcix.net)... 50.47.0.53, 2605:21c0:1000:4a::53
Connecting to ziply.mm.fcix.net (ziply.mm.fcix.net)|50.47.0.53|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2024-08-03 13:47:45 ERROR 404: Not Found.

--2024-08-03 13:47:47--  https://ziply.mm.fcix.net/manjaro/stable/extra/x86_64/extra.db
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ziply.mm.fcix.net (ziply.mm.fcix.net)... 50.47.0.53, 2605:21c0:1000:4a::53
Connecting to ziply.mm.fcix.net (ziply.mm.fcix.net)|50.47.0.53|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 8088471 (7.7M) [application/octet-stream]
Saving to: ‘/var/lib/pacman/sync/extra.db.part’

/var/lib/pacman/sync/e 100%[===========================>]   7.71M  7.70MB/s    in 1.0s    

2024-08-03 13:47:49 (7.70 MB/s) - ‘/var/lib/pacman/sync/extra.db.part’ saved [8088471/8088471]

--2024-08-03 13:47:49--  https://ziply.mm.fcix.net/manjaro/stable/extra/x86_64/extra.db.sig
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ziply.mm.fcix.net (ziply.mm.fcix.net)... 50.47.0.53, 2605:21c0:1000:4a::53
Connecting to ziply.mm.fcix.net (ziply.mm.fcix.net)|50.47.0.53|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2024-08-03 13:47:49 ERROR 404: Not Found.

--2024-08-03 13:47:51--  https://ziply.mm.fcix.net/manjaro/stable/multilib/x86_64/multilib.db
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ziply.mm.fcix.net (ziply.mm.fcix.net)... 50.47.0.53, 2605:21c0:1000:4a::53
Connecting to ziply.mm.fcix.net (ziply.mm.fcix.net)|50.47.0.53|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 148853 (145K) [application/octet-stream]
Saving to: ‘/var/lib/pacman/sync/multilib.db.part’

/var/lib/pacman/sync/m 100%[===========================>] 145.36K   792KB/s    in 0.2s    

2024-08-03 13:47:52 (792 KB/s) - ‘/var/lib/pacman/sync/multilib.db.part’ saved [148853/148853]

--2024-08-03 13:47:52--  https://ziply.mm.fcix.net/manjaro/stable/multilib/x86_64/multilib.db.sig
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ziply.mm.fcix.net (ziply.mm.fcix.net)... 50.47.0.53, 2605:21c0:1000:4a::53
Connecting to ziply.mm.fcix.net (ziply.mm.fcix.net)|50.47.0.53|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2024-08-03 13:47:52 ERROR 404: Not Found.

:: Searching AUR for updates...
:: Searching databases for updates...
 -> Packages not in AUR: overgrive  python-exceptiongroup
 -> spectre-meltdown-checker: local (0.46+23+g0f2edb1-1) is newer than AUR (0.46-1)
 there is nothing to do

Just out of curiosity, I clicked on

https://repo.maboxlinux.org/stable/x86_64/maboxlinux.db.sig

…and I truly got a 404 Page Not Found response from the server.

I have followed these instructions:

And then, these here too:

Then, I tried:

$ sudo pacman-key --populate mabox
==> Appending keys from mabox.gpg...
==> Locally signing trusted keys in keyring...
  -> Locally signed 1 key.
==> Importing owner trust values...
gpg: inserting ownertrust of 4
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   1  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   1  signed:   0  trust: 0-, 0q, 0n, 1m, 0f, 0u

That was a promising response, but yet no luck. However, maybe I have a misconception, and signatures are not truly required to update the system, as this post suggests:

…it states that «the db sigs are optional. When not present, some mirrors return a HTML message saying not found, which pamac tries to use as a signature, resulting in error.»

Just to be sure, is this latter information correct for Mabox, as well?

Packages in Mabox repo do not use signatures. So there are no *.sig files on the server.
Looks like you altered your /etc/pacman.conf…
Mabox repo part should look like:

[maboxlinux]
SigLevel = Optional TrustAll
Server = http://repo.maboxlinux.org/stable/$arch/

You can access packages by both http and https protocols.

What is strange for me is line:

URL transformed to HTTPS due to an HSTS policy

in your output.

Check your /etc/pacman.conf

Here it is as provided by Mabox currently:

#
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir     = /
#DBPath      = /var/lib/pacman/
CacheDir = /var/cache/pacman/pkg/
#LogFile     = /var/log/pacman.log
#GPGDir      = /etc/pacman.d/gnupg/
#HookDir     = /etc/pacman.d/hooks/
HoldPkg      = pacman glibc manjaro-system

#XferCommand = /usr/bin/curl -C - -f %u > %o
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
#UseDelta    = 0.7
Architecture = auto

#IgnorePkg   =
#IgnorePkg   =
#IgnoreGroup =

#NoUpgrade   =
#NoExtract   =

# Misc options
#UseSyslog
Color
TotalDownload
# We cannot check disk space from within a chroot environment
CheckSpace
VerbosePkgLists

ParallelDownloads = 4
ILoveCandy

# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
SigLevel    = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required

# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Manjaro Linux
# packagers with `pacman-key --populate archlinux manjaro`.

#
# REPOSITORIES
#   - can be defined here or included from another file
#   - pacman will search repositories in the order defined here
#   - local/custom mirrors can be added here or in separate files
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
#       [repo-name]
#       Server = ServerName
#       Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.
[maboxlinux]
SigLevel = Optional TrustAll
Server = http://repo.maboxlinux.org/stable/$arch/

[core]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

[extra]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

# If you want to run 32 bit applications on your x86_64 system,
# enable the multilib repositories as required here.

[multilib]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository.  See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs

Oh, well, yes, I just uncommented this line:

#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u

because pamac started to give these messages; although I backed to original, I still have connection time-out message.

Well, I also commented this line, which you suggested to be removed:

#SyncFirst = manjaro-system archlinux-keyring manjaro-keyring mabox-keyring

Apart from that, nothing else is changed.

You are absolutely right about the strange line… I’ll investigate about it.

Thanks for your input. I’ll keep you posted!

Cheers!

Well, about HSTS, I found the solution here:

Yet I need to understand why I cannot synchronize maboxlinux.db, just this repo…

It seems I’m getting closer to the root cause.

Does this output of ping command tell you about connection time-out?

ping repo.maboxlinux.org
PING repo.maboxlinux.org (5.196.196.149) 56(84) bytes of data.
64 bytes from ip149.ip-5-196-196.eu (5.196.196.149): icmp_seq=1 ttl=47 time=181 ms
64 bytes from ip149.ip-5-196-196.eu (5.196.196.149): icmp_seq=2 ttl=47 time=181 ms
64 bytes from ip149.ip-5-196-196.eu (5.196.196.149): icmp_seq=3 ttl=47 time=181 ms
64 bytes from ip149.ip-5-196-196.eu (5.196.196.149): icmp_seq=4 ttl=47 time=179 ms
64 bytes from ip149.ip-5-196-196.eu (5.196.196.149): icmp_seq=5 ttl=47 time=179 ms
64 bytes from ip149.ip-5-196-196.eu (5.196.196.149): icmp_seq=6 ttl=47 time=181 ms
^C
--- repo.maboxlinux.org ping statistics ---
7 packets transmitted, 6 received, 14.2857% packet loss, time 6003ms
rtt min/avg/max/mdev = 178.651/180.367/181.345/0.993 ms

Can I change the time to query the repo’s database file? Something like I do with pacman-mirrors? To give time the repo to answer to my query… (it’s just an idea).

Just for the sake of completeness, the Telegram’s Manjaro en Español team helped me. Since I can download the maboxlinux.db using wget, I uncommented again the line in /etc/pacman.conf:

XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u

Then, after

$ sudo pacman -Sy --debug

I finally retrieved the Mabox database.

Thanks, Christian Finnberg from the Spanish Telegram Manjaro team!

1 Like