Pacman-mirrors - Please check your network connection

Support
1

When I run pacman-mirrors I get this result:

pacman-mirrors
Pacman-mirrors version 4.23.2
::Downloading status failed!
::Please check you network connection ...

My DNS should be okay, using:

nameserver 8.8.4.4
nameserver 8.8.8.8

But I have tried other DNS providers, including my ISP’s.

I did search the forum. Maybe I missed a relevant post. If so, apologies in advance.

Interestingly though, I was able to interactively update my mirror list country selection.

sudo pacman-mirrors --interactive && sudo pacman -Syu

And, I seem to be able to keep my system up to date. I am just curious why I am seeing this result. I’d appreciate your thoughts and guidance.

Thank you.

2

The server provides a mirror status file - which could not be fetched - the why is unknown.

The message tells you that downloading the status file failed.

Most often it is an intermittent issue which dissappears after a short time.

The mirror selection tool will work nonetheless - albeit not with current status data - not a serious issue though.

When I run it - as time of writing 2023-07-03T07:24:00Z

$ sudo pacman-mirrors -c at -i -fc
::INFO Downloading mirrors from Manjaro
::INFO => Mirror pool: https://repo.manjaro.org/mirrors.json
::INFO => Mirror status: https://repo.manjaro.org/status.json
::INFO Using custom mirror file
::INFO Querying mirrors - This may take some time
  0.299 Austria        : https://mirror.easyname.at/manjaro/
  0.384 Austria        : https://mirror.alwyzon.net/manjaro/
::INFO User generated mirror list
::------------------------------------------------------------
::INFO Custom mirror file saved: /var/lib/pacman-mirrors/custom-mirrors.json
::INFO Writing mirror list
::Austria         : https://mirror.easyname.at/manjaro/arm-unstable/$repo/$arch
::INFO Mirror list generated and saved to: /etc/pacman.d/mirrorlist
1 Like
3

Thank you for your reply, @linux-aarhus. Your explanation does make sense. However, I have seen this consistently for several days now. For what it is worth, I have not made any other changes to my mirrors, nor any other configuration changes.

When I run sudo pacman-mirrors -c United_States,Germany,Austria -i -fc, for example, I get the following output:

sudo pacman-mirrors -c United_States,Germany,Austria -i -fc
::WARNING https://repo.manjaro.org 'Connection: HTTPSConnectionPool(host='repo.manjaro.org', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))'
::WARNING https://wikipedia.org 'Connection: HTTPSConnectionPool(host='wikipedia.org', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))'
::WARNING https://repo.manjaro.org 'Connection: HTTPSConnectionPool(host='repo.manjaro.org', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))'
::WARNING https://wikipedia.org 'Connection: HTTPSConnectionPool(host='wikipedia.org', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))'
::INFO Downloading mirrors from Manjaro
::INFO => Mirror pool: https://repo.manjaro.org/mirrors.json


::ERROR Connection: HTTPSConnectionPool(host='repo.manjaro.org', port=443): Max retries exceeded with url: /mirrors.json (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))
::INFO => Mirror status: https://repo.manjaro.org/status.json


::ERROR Connection: HTTPSConnectionPool(host='repo.manjaro.org', port=443): Max retries exceeded with url: /status.json (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))
::INFO Using custom mirror file
::INFO Querying mirrors - This may take some time
  ..... Austria        : https://mirror.easyname.at/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='mirror.easyname.at', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... Germany        : https://mirror.alpix.eu/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='mirror.alpix.eu', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  0.886 United_States  : http://mirror.fcix.net/manjaro/
  ..... United_States  : https://nnenix.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='nnenix.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://irltoolkit.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='irltoolkit.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://uvermont.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='uvermont.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://ziply.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='ziply.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://mnvoip.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='mnvoip.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://forksystems.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='forksystems.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://codingflyboy.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='codingflyboy.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://coresite.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='coresite.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://opencolo.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='opencolo.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://southfront.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='southfront.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

  ..... United_States  : https://volico.mm.fcix.net/manjaro/

::ERROR Connection: HTTPSConnectionPool(host='volico.mm.fcix.net', port=443): Max retries exceeded with url: /manjaro/stable/core/x86_64/core.db.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1002)')))

But ultimately, I can select several from United States, Germany and Austria.

::INFO User generated mirror list
::------------------------------------------------------------
::INFO Custom mirror file saved: /var/lib/pacman-mirrors/custom-mirrors.json
::INFO Writing mirror list
::Austria         : https://mirror.easyname.at/manjaro/stable/$repo/$arch
::Germany         : https://mirror.alpix.eu/manjaro/stable/$repo/$arch
::United_States   : http://mirror.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://nnenix.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://irltoolkit.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://uvermont.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://ziply.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://mnvoip.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://forksystems.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://codingflyboy.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://coresite.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://opencolo.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://southfront.mm.fcix.net/manjaro/stable/$repo/$arch
::United_States   : https://volico.mm.fcix.net/manjaro/stable/$repo/$arch
::INFO Mirror list generated and saved to: /etc/pacman.d/mirrorlist

sudo pacman -Syyu is successful.

Maybe a different issue, I don’t want to pollute this thread with a different issue. I would like to know know if this is related.

4

I have no idea.

It looks rather strange that you have errors related to certificate.

This indicates issues with your systems certificate storage as seen from the following excerpt.

5

This indicates issues with your systems certificate storage as seen from the following excerpt.

Should I start a new thread for this?

I am not sure how to troubleshoot this issue.

Back to the original issue, it seems that pacman-mirrors is not working, and is not a temporary situation.

pacman-mirrors
Pacman-mirrors version 4.23.2
::Downloading status failed!
::Please check you network connection ...

I am definitely connected to the Internet. I haven’t yet been able to find much info elsewhere on this being a persistent problem.

Any suggestions on how to approach this, any commands that I can run to get further details?

Thank you.

6

The error message you provided shows an issue with the certificate chain.

It may surface when the systems ca-certificates package goes severely out of date.

pacman-mirrors is working as it is expected to using a normal Manjaro system and the code has worked without major issuses for years - last time the package was rebuilt was when python was updated to 3.11 - and it still work on thousands of systems.

Under normal circumstance it checks a couple of generic websites to conclude if a network connection is available or not - this is doucmented in the man page and the wiki.

If all of those websites is unreachable - the app concludes there is no network connection - which of course may be false - if all three fails to respond.

Strictly speaking - pacman-mirrors - is a Manjaro specific application designed to maintain your mirrorlist.

You can manually edit the mirrolist to include any of the mirrors found at https://repo.manjaro.org.

The format of a line in /etc/pacman.d/mirrorlist can be seen by listing the file

 $ cat /etc/pacman.d/mirrorlist
##
## Manjaro Linux custom mirrorlist
## Generated on 2023-06-03 11:38
##
## Please use 'pacman-mirrors -id' To reset custom mirrorlist
## Please use 'pacman-mirrors -c all' To reset custom mirrorlist
## To remove custom config run  'pacman-mirrors -c all'
##

## Country : Austria
Server = https://mirror.easyname.at/manjaro/unstable/$repo/$arch
7

I apologize for not following up on this sooner.

It looks like ca-certificates is up to date, 20220905-1. Are there any suggestions that you could offer as to what I could look at next?

8

Maybe your ISP hijacks TLS requests? Or it’s a outdated DNS?

What happens if you access https://repo.manjaro.org on a browser?

9

I thought about that, too. I am currently using Google DNS.

nmcli device show wlp15s0| grep -i dns
IP4.DNS[1]:                             8.8.8.8
IP4.DNS[2]:                             8.8.4.4
IP4.DNS[3]:                             192.168.50.1

cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 192.168.50.1

I have tried different DNS provides, including my ISP, with the same results. I have also tried using a VPN and, of course, without enabling the VPN, just to see if there were any potential ISP issues.

That pages loads properly, the certificate and trust chain are good.