Unable to Update Proxmox

[darren2517]

Hi everyone,
Can anyone help me with updates on my Proxmox please? I can ping 1)Gateway, 2)1.1.1.1 and 3)google.com.

When I dig download.proxmox.com, I get;

dig download.proxmox.com

; <<>> DiG 9.16.44-Debian <<>> download.proxmox.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29794
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1432
;; QUESTION SECTION:
;download.proxmox.com.          IN      A

;; ANSWER SECTION:
download.proxmox.com.   209     IN      CNAME   download.cdn.proxmox.com.
download.cdn.proxmox.com. 60    IN      CNAME   fr.cdn.proxmox.com.
fr.cdn.proxmox.com.     60      IN      A       51.91.38.34

;; Query time: 204 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Tue Oct 17 10:24:08 BST 2023
;; MSG SIZE  rcvd: 109

However when I try to update;

root@:~# apt update
Hit:1 http://security.debian.org/debian-security bullseye-security InRelease
Hit:2 http://ftp.debian.org/debian bullseye InRelease       
Hit:3 http://ftp.debian.org/debian bullseye-updates InRelease
Err:4 http://download.proxmox.com/debian/pve bullseye InRelease
  Cannot initiate the connection to download.proxmox.com:80 (2001:41d0:203:7470::34). - connect (101: Network is unreachable) Could not connect to download.proxmox.com:80 (51.91.38.34), connection timed out
Reading package lists... Done                                   
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://download.proxmox.com/debian/pve/dists/bullseye/InRelease  Cannot initiate the connection to download.proxmox.com:80 (2001:41d0:203:7470::34). - connect (101: Network is unreachable) Could not connect to download.proxmox.com:80 (51.91.38.34), connection timed out
W: Some index files failed to download. They have been ignored, or old ones used instead.

My Network Topology is;
ISP Modem -> Firewall -> Unifi Switch -> Proxmox 7.4-16

Firewall
WAN <- ISP Modem
LAN -> Unifi Switch(port1)
Using pfsense with vlans

Unifi Switch
firewall (port1) set to 'Default'
proxmox (port10) set to 'Default'

Proxmox Networking;

root@:~# nano /etc/network/interfaces

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

auto vmbr0
iface vmbr0 inet manual
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#VLAN Aware Switch

auto vmbr0.5
iface vmbr0.5 inet manual
        address 10.27.5.151/24
        gateway 10.27.5.1
#MGMT 5

Can anyone see any possible issues causing the updates to fail?
Thanks

 

[Stoiko Ivanov]

On a hunch - it seems that your node gets an IPv6 address (probably via SLAAC), but is not really able to reach the internet on IPv6
(all tests you made, and the dig are on IPv4)

Either fix your network to actually support IPv6 (or if this is not possible - disable it in the router) - or try disabling ipv6 on the PVE node:
https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#_disabling_ipv6_on_the_node

I hope this helps!

 

[darren2517]

Thank you for your suggestion! I never thought about an IPv6 issue, I thought that it was fairly standard practice to disable IPv6 for an easier to manage network.
I'll enable the IPv6 on pfsense first an see what happens..

 

[darren2517]

ok, I've enabled IPv6 on my router but still no updates.

I also added
nano /etc/sysctl.d/disable-ipv6.conf

with the content:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

I've rebooted the node but still unable to update!

starting apt-get update
Hit:1 http://security.debian.org/debian-security bullseye-security InRelease
Hit:2 http://ftp.debian.org/debian bullseye InRelease
Hit:3 http://ftp.debian.org/debian bullseye-updates InRelease
Err:4 http://download.proxmox.com/debian/pve bullseye InRelease
  Could not connect to download.proxmox.com:80 (51.91.38.34), connection timed out
Reading package lists...
W: Failed to fetch http://download.proxmox.com/debian/pve/dists/bullseye/InRelease  Could not connect to download.proxmox.com:80 (51.91.38.34), connection timed out
W: Some index files failed to download. They have been ignored, or old ones used instead.
TASK OK

 

[Cryptonym]

ok, I've enabled IPv6 on my router but still no updates.

I also added
nano /etc/sysctl.d/disable-ipv6.conf

with the content:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

I've rebooted the node but still unable to update!

starting apt-get update
Hit:1 http://security.debian.org/debian-security bullseye-security InRelease
Hit:2 http://ftp.debian.org/debian bullseye InRelease
Hit:3 http://ftp.debian.org/debian bullseye-updates InRelease
Err:4 http://download.proxmox.com/debian/pve bullseye InRelease
  Could not connect to download.proxmox.com:80 (51.91.38.34), connection timed out
Reading package lists...
W: Failed to fetch http://download.proxmox.com/debian/pve/dists/bullseye/InRelease  Could not connect to download.proxmox.com:80 (51.91.38.34), connection timed out
W: Some index files failed to download. They have been ignored, or old ones used instead.
TASK OK

Hi,
I'm experiencing the same issue, did you ever figure it out?

 

[darren2517]

Hi,
I'm experiencing the same issue, did you ever figure it out?

Yes I figured it out!
For me the problem was, I had added myself as a user but I didn't have the permissions to update!

So I logged out and logged back in again as 'root', then I was able to update as normal.