proxmox-offline-mirror proxy error

hpcre

New Member
Apr 6, 2024
9
1
3
Hello,
I have followed the documentation to create a proxmox offline mirror on a debian 12 server. It is behind a proxy, and I have create the necessary proxy environment variable as follows
ALL_PROXY=http://11.22.33.44:80

but whenever I try to run proxmox-offline-mirror, i get the following error

Code:
root@debian:/var/log# proxmox-offline-mirror mirror snapshot create debian-bookworm-security
Fetching Release/Release.gpg files
-> GET 'http://deb.debian.org/debian-security/dists/bookworm-security/Release.gpg'..
Release.gpg fetch failure: http://deb.debian.org/debian-security/dists/bookworm-security/Release.gpg: Proxy failed to connect
Fetching InRelease file
-> GET 'http://deb.debian.org/debian-security/dists/bookworm-security/InRelease'..
InRelease fetch failure: http://deb.debian.org/debian-security/dists/bookworm-security/InRelease: Proxy failed to connect
Error: Neither Release(.gpg) nor InRelease available!

I tested the proxy config with tools like wget, and they work fine.

[edit] I tried to run an strace on the proxmox-offline-mirror command, i can see the following error
Code:
sendto(9, "CONNECT deb.debian.org:80 HTTP/1"..., 122, MSG_NOSIGNAL, NULL, 0) = 122
recvfrom(9, "HTTP/1.1 403 Tunnel or SSL Forbi"..., 256, 0, NULL, NULL) = 256
recvfrom(9, "E></HEAD>\n<BODY BGCOLOR=\"white\" "..., 256, 0, NULL, NULL) = 256
recvfrom(9, " -->\n</BODY>\n                   "..., 256, 0, NULL, NULL) = 256
recvfrom(9, "                                "..., 256, 0, NULL, NULL) = 112
close(9)                                = 0
write(2, "Release.gpg fetch failure: ", 27Release.gpg fetch failure: ) = 27
write(2, "http://deb.debian.org/debian-sec"..., 73http://deb.debian.org/debian-security/dists/bookworm-security/Release.gpg) = 73
write(2, ": ", 2: )                       = 2
write(2, "Proxy failed to connect", 23Proxy failed to connect) = 23
write(2, "\n", 1
)                       = 1
write(1, "Fetching InRelease file\n", 24Fetching InRelease file
) = 24
write(1, "-> GET 'http://deb.debian.org/de"..., 83-> GET 'http://deb.debian.org/debian-security/dists/bookworm-security/InRelease'..
) = 83
socket(AF_INET, SOCK_STREAM|SOCK_CLOEXEC, IPPROTO_IP) = 9
ioctl(9, FIONBIO, [1])                  = 0
connect(9, {sa_family=AF_INET, sin_port=htons(80), sin_addr=inet_addr("11.22.33.44")}, 16) = -1 EINPROGRESS (Operation now in progress)
ioctl(9, FIONBIO, [0])                  = 0
poll([{fd=9, events=POLLOUT}], 1, 29999) = 1 ([{fd=9, revents=POLLOUT}])
setsockopt(9, SOL_TCP, TCP_NODELAY, [1], 4) = 0
setsockopt(9, SOL_SOCKET, SO_RCVTIMEO_OLD, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16) = 0
setsockopt(9, SOL_SOCKET, SO_SNDTIMEO_OLD, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16) = 0
sendto(9, "CONNECT deb.debian.org:80 HTTP/1"..., 122, MSG_NOSIGNAL, NULL, 0) = 122
recvfrom(9, "HTTP/1.1 403 Tunnel or SSL Forbi"..., 256, 0, NULL, NULL) = 256
recvfrom(9, "E></HEAD>\n<BODY BGCOLOR=\"white\" "..., 256, 0, NULL, NULL) = 256
recvfrom(9, " -->\n</BODY>\n                   "..., 256, 0, NULL, NULL) = 256
recvfrom(9, "                                "..., 256, 0, NULL, NULL) = 112
close(9)                                = 0
write(2, "InRelease fetch failure: ", 25InRelease fetch failure: ) = 25
write(2, "http://deb.debian.org/debian-sec"..., 71http://deb.debian.org/debian-security/dists/bookworm-security/InRelease) = 71
write(2, ": ", 2: )                       = 2
write(2, "Proxy failed to connect", 23Proxy failed to connect) = 23
 
Last edited:
The question is, how does proxmox_offline_mirror connect to the internet ? how is it different from normal apt ?
 
well, you can see the request and error in your strace output:

Code:
sendto(9, "CONNECT deb.debian.org:80 HTTP/1"..., 122, MSG_NOSIGNAL, NULL, 0) = 122
recvfrom(9, "HTTP/1.1 403 Tunnel or SSL Forbi"..., 256, 0, NULL, NULL) = 256
recvfrom(9, "E></HEAD>\n<BODY BGCOLOR=\"white\" "..., 256, 0, NULL, NULL) = 256
recvfrom(9, " -->\n</BODY>\n                   "..., 256, 0, NULL, NULL) = 256
recvfrom(9, "                                "..., 256, 0, NULL, NULL) = 112
close(9)                                = 0

POM sends a CONNECT request to your proxy, the proxy returns 403..
 
  • Like
Reactions: hpcre
well, you can see the request and error in your strace output:

Code:
sendto(9, "CONNECT deb.debian.org:80 HTTP/1"..., 122, MSG_NOSIGNAL, NULL, 0) = 122
recvfrom(9, "HTTP/1.1 403 Tunnel or SSL Forbi"..., 256, 0, NULL, NULL) = 256
recvfrom(9, "E></HEAD>\n<BODY BGCOLOR=\"white\" "..., 256, 0, NULL, NULL) = 256
recvfrom(9, " -->\n</BODY>\n                   "..., 256, 0, NULL, NULL) = 256
recvfrom(9, "                                "..., 256, 0, NULL, NULL) = 112
close(9)                                = 0

POM sends a CONNECT request to your proxy, the proxy returns 403..
I'm investigating this with the proxy admin