Welcome to Centmin Mod Community
Become a Member

Installer makes wget to fail

Discussion in 'Install & Upgrades or Pre-Install Questions' started by BrianLT, Jan 19, 2025.

  1. BrianLT

    BrianLT New Member

    8
    1
    3
    Jan 19, 2025
    Ratings:
    +3
    Local Time:
    10:59 PM
    Relevant information:
    CentOS Version: Almalinux 9.4
    Server AX102 from Hetzner

    This is my first time using Centmin Mod. I did the following:

    1. Installed Almalinux 9.4
    2. Ran the commands: yum update and yum upgrade
    3. Disabled SELINUX
    4. Rebooted the server
    At this point, the wget command to GitHub was working because I tested it before running the following command:

    bash installer83.sh

    During the installation, the following error occurred:

    installer83.sh: line 1859: /sys/module/nf_conntrack/parameters/hashsize: No such file or directory
    * Applying /usr/lib/sysctl.d/10-default-yama-scope.conf ...
    * Applying /etc/sysctl.d/101-sysctl.conf ...
    * Applying /usr/lib/sysctl.d/50-coredump.conf ...
    * Applying /usr/lib/sysctl.d/50-default.conf ...
    * Applying /usr/lib/sysctl.d/50-libkcapi-optmem_max.conf ...
    * Applying /usr/lib/sysctl.d/50-pid-max.conf ...
    * Applying /usr/lib/sysctl.d/50-redhat.conf ...
    * Applying /etc/sysctl.d/99-hetzner.conf ...
    * Applying /etc/sysctl.d/99-sysctl.conf ...
    * Applying /etc/sysctl.conf ...

    I pressed Control-C to stop the installer because once the installer tried to access GitHub, it failed, and I did not want to reformat the server again.

    After this, the ping to GitHub was very slow, and the wget command to GitHub no longer worked.

    Example error with wget:
    --2025-01-18 20:02:33-- (try: 3) https://github.com/jedisct1/libsodium/releases/download/1.0.20-RELEASE/libsodium-1.0.20.tar.gz Connecting to github.com (github.com)|140.82.121.3|:443... failed: Connection timed out. Giving up.


    It seems the changes this installer made to sysctl are causing my server to fail when trying to download anything from GitHub or other links.

    Additional issues:
    • Pinging google.com shows a slowdown.
    • wget no longer works.
    I searched the forum for similar situations, but I think I am the only one experiencing this issue.
     
  2. eva2000

    eva2000 Administrator Staff Member

    55,155
    12,249
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,825
    Local Time:
    7:59 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  3. BrianLT

    BrianLT New Member

    8
    1
    3
    Jan 19, 2025
    Ratings:
    +3
    Local Time:
    10:59 PM
    Hi
    I dont have the motherboard issue because i did buy this servers in 15 of january 2025 and hetzner shows an message on my hetzner account.

    [​IMG]
    Also this problem is happening in 2 Servers that are very different.

    Dedicated Server AX102
    CPU: AMD Ryzen™ 9 7950X3D
    RAM: 128 GB DDR5 ECC
    NVMe: 2x 1.92 TB(Gen 4)
    Internet: 1 GBit/s
    Location: Germany, FSN1
    OS: AlmaLinux 9.4

    Dedicated Server AX42
    CPU: AMD Ryzen™ 7 PRO 8700GE
    RAM: 128 GB DDR5
    NVMe: 2x 512 TB(Gen 4)
    Internet: 1 GBit/s
    Location: Finland, HEL1
    OS: AlmaLinux 9.4
    All prints, gif, and logs are coming from this server. AX42.

    How to reproduce this problem.

    1. Have an Hetzner dedicated server.
    2. On installimage choose Alma-94-amd64-base (AlmaLinux 9.4)
    [​IMG]

    3. Follow the same commands
    yum -y update && yum -y upgrade
    sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config

    4. Reboot

    5. Test Ping and Wget (It works good)
    [​IMG]


    6. Install centminMod Beta or Stable. In my case is Beta
    Code (Text):
    curl -O https://centminmod.com/betainstaller83.sh && chmod 0700 betainstaller83.sh && bash betainstaller83.sh


    It says to reboot the system to disable SELinux then install CentminMod but SELinux was already disabled...

    7. Run the command again: bash betainstaller83.sh

    During the install it will take a lot of time because it will try to retry most URLs Example:
    Code:
    [MIRROR] apr-1.7.0-12.el9_3.x86_64.rpm: Curl error (28): Timeout was reached for https://mirror.se.altushost.com/almalinux/9.5/AppStre                                            am/x86_64/os/Packages/apr-1.7.0-12.el9_3.x86_64.rpm [Failed to connect to mirror.se.altushost.com port 443: Connection timed out]
    [MIRROR] apr-1.7.0-12.el9_3.x86_64.rpm: Curl error (28): Timeout was reached for http://almalinux.web.trex.fi/almalinux/9.5/AppStream/x86_64/os/Packages/apr-1.7.0-12.el9_3.x86_64.rpm [Failed to connect to almalinux.web.trex.fi port 80: Connection timed out]
    [MIRROR] gcc-toolset-13-binutils-2.40-21.el9.x86_64.rpm: Curl error (28): Timeout was reached for http://mirror.veesp.com/almalinux/9.5/AppStream/x86_64/os/Packages/gcc-toolset-13-binutils-2.40-21.el9.x86_64.rpm [Failed to connect to mirror.veesp.com port 80: Connection timed out]
    [MIRROR] gcc-toolset-13-binutils-gold-2.40-21.el9.x86_64.rpm: Curl error (28): Timeout was reached for http://mirror.veesp.com/almalinux/9.5/AppStream/x86_64/os/Packages/gcc-toolset-13-binutils-gold-2.40-21.el9.x86_64.rpm [Failed to connect to mirror.veesp.com port 80: Connection timed out]
    [MIRROR] gcc-toolset-13-gcc-13.3.1-2.1.el9_4.x86_64.rpm: Curl error (28): Timeout was reached for http://mirror.veesp.com/almalinux/9.5/AppStream/x86_64/os/Packages/gcc-toolset-13-gcc-13.3.1-2.1.el9_4.x86_64.rpm [Failed to connect to mirror.veesp.com port 80: Connection timed out]
    Lets try again the same WGET test.
    [​IMG]
    Sometimes it will fail, sometimes it will work its an gamble.
    The same with the ping command it will get slowed or just timeout too.

    This is just a bit of the errors that appear during the install.
    Here is the Installer_200125-000641_minimal.log (Dedicated Server AX42) > https://gist.github.com/THEPRO69/2cc949e9f3c7c39ca06801f11758c121

    Here is the config /etc/sysctl.d/101-sysctl.conf
    Centmin Hetzner 101-sysctl - Pastebin.com

    How to fix.

    1) Format the server, Install Almalinux 9, Disable SELINUX, Restart
    2) During the very early of the install if you see the message "installing yum packages..." Press control C to stop the install and at that point the script already edited and created "/etc/sysctl.d/101-sysctl.conf"
    3 ) Edit /etc/sysctl.d/101-sysctl.conf and remove everyting except the first line "# centminmod added"
    4) Run this command: sysctl --system
    5) reboot

    6) And then execute the install again and now all packages will install without any problem or timeouts.

    Or just create "/etc/sysctl.d/101-sysctl.conf" and on the first line put "# centminmod added" and run the centminmod Script.

    I tested this in the 2 dedicated servers I have, and the problem is on both of them.
    I tried on a VPS on Hetzner, and I did not have any problems.
    This issue seems to be related to the file and its config "/etc/sysctl.d/101-sysctl.conf" I don't know what line it is that is causing this weird issue.
    I did not try AlmaLinux 8 or Rocky Linux. I just wanted the AL 9 that I use for all my servers.
    I did also try the stable version, and the problem is there too.

    I'm pretty sure other people will run into this.
     
    Last edited: Jan 20, 2025
  4. eva2000

    eva2000 Administrator Staff Member

    55,155
    12,249
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,825
    Local Time:
    7:59 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    AlmaLinux/Rocky Linux 9.x can not disable SELINUX this way anymore via that file edit, you need to follow Centmin Mod installer's outlined method of SELINUX disabling. See https://community.centminmod.com/threads/el8-el9-selinux-disable-handling.23761/

    Instead of screenshots, you can also copy and paste relevant errors/output using the CODEB tag How to use forum BBCODE code tags :)

    As to /etc/sysctl.d/101-sysctl.conf, that is strange as I haven't experienced it myself.
     
  5. BrianLT

    BrianLT New Member

    8
    1
    3
    Jan 19, 2025
    Ratings:
    +3
    Local Time:
    10:59 PM
    Hi, as for my "old" method of disabling SELinux it seems to work but i will follow Centmin Mod method of SELINUX disabling.

    Code (Text):
    ~]# sestatus
    SELinux status:                 disabled
    
    ~]# getenforce
    Disabled
    


    As for the logs i did share the installer minimal log file. (Its full of "Connection timed out")
    I will try to run again in an few hours to see if it was SELinux not being disabled correctly but I'm pretty sure that's not the problem because sestatus and getenforce says its disabled using my old method.
     
  6. eva2000

    eva2000 Administrator Staff Member

    55,155
    12,249
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,825
    Local Time:
    7:59 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Next to you try on fresh OS reload, try running these 2 commands first before doing Centmin Mod install and see what output you get and if there's any connection timeouts
    Code (Text):
    yum clean all
    yum repolist all
    
     
  7. BrianLT

    BrianLT New Member

    8
    1
    3
    Jan 19, 2025
    Ratings:
    +3
    Local Time:
    10:59 PM
    Code (Text):
    Using username "root".
    [root@almaLinux9 ~]# yum clean all
    26 files removed
    [root@almaLinux9 ~]# yum repolist all
    repo id                                                                                         repo name                                                                                                     status
    appstream                                                                                       AlmaLinux 9 - AppStream                                                                                       enabled
    appstream-debuginfo                                                                             AlmaLinux 9 - AppStream - Debug                                                                               disabled
    appstream-source                                                                                AlmaLinux 9 - AppStream - Source                                                                              disabled
    baseos                                                                                          AlmaLinux 9 - BaseOS                                                                                          enabled
    baseos-debuginfo                                                                                AlmaLinux 9 - BaseOS - Debug                                                                                  disabled
    baseos-source                                                                                   AlmaLinux 9 - BaseOS - Source                                                                                 disabled
    crb                                                                                             AlmaLinux 9 - CRB                                                                                             disabled
    crb-debuginfo                                                                                   AlmaLinux 9 - CRB - Debug                                                                                     disabled
    crb-source                                                                                      AlmaLinux 9 - CRB - Source                                                                                    disabled
    extras                                                                                          AlmaLinux 9 - Extras                                                                                          enabled
    extras-debuginfo                                                                                AlmaLinux 9 - Extras - Debug                                                                                  disabled
    extras-source                                                                                   AlmaLinux 9 - Extras - Source                                                                                 disabled
    highavailability                                                                                AlmaLinux 9 - HighAvailability                                                                                disabled
    highavailability-debuginfo                                                                      AlmaLinux 9 - HighAvailability - Debug                                                                        disabled
    highavailability-source                                                                         AlmaLinux 9 - HighAvailability - Source                                                                       disabled
    nfv                                                                                             AlmaLinux 9 - NFV                                                                                             disabled
    nfv-debuginfo                                                                                   AlmaLinux 9 - NFV - Debug                                                                                     disabled
    nfv-source                                                                                      AlmaLinux 9 - NFV - Source                                                                                    disabled
    plus                                                                                            AlmaLinux 9 - Plus                                                                                            disabled
    plus-debuginfo                                                                                  AlmaLinux 9 - Plus - Debug                                                                                    disabled
    plus-source                                                                                     AlmaLinux 9 - Plus - Source                                                                                   disabled
    resilientstorage                                                                                AlmaLinux 9 - ResilientStorage                                                                                disabled
    resilientstorage-debuginfo                                                                      AlmaLinux 9 - ResilientStorage - Debug                                                                        disabled
    resilientstorage-source                                                                         AlmaLinux 9 - ResilientStorage - Source                                                                       disabled
    rt                                                                                              AlmaLinux 9 - RT                                                                                              disabled
    rt-debuginfo                                                                                    AlmaLinux 9 - RT - Debug                                                                                      disabled
    rt-source                                                                                       AlmaLinux 9 - RT - Source                                                                                     disabled
    sap                                                                                             AlmaLinux 9 - SAP                                                                                             disabled
    sap-debuginfo                                                                                   AlmaLinux 9 - SAP - Debug                                                                                     disabled
    sap-source                                                                                      AlmaLinux 9 - SAP - Source                                                                                    disabled
    saphana                                                                                         AlmaLinux 9 - SAPHANA                                                                                         disabled
    saphana-debuginfo                                                                               AlmaLinux 9 - SAPHANA - Debug                                                                                 disabled
    saphana-source                                                                                  AlmaLinux 9 - SAPHANA - Source                                                                                disabled
    

    It seems that only this 3 are enabled
    Code (Text):
    AlmaLinux 9 - AppStream
    AlmaLinux 9 - BaseOS
    AlmaLinux 9 - Extras
    
     
  8. eva2000

    eva2000 Administrator Staff Member

    55,155
    12,249
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,825
    Local Time:
    7:59 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    That's expected, Centmin Mod installer takes care of all required YUM repos
     
  9. redsy

    redsy Premium Member Premium Member

    3
    0
    1
    Mar 16, 2025
    Ratings:
    +1
    Local Time:
    10:59 PM
    Thanks Brian, I spent hours trying to fix this yesterday!

    Same issue here - Hetzner EX44 Dedicated.

    Using Proxmox as host and creating a 16GB, 8 vCPU VM experienced the same timeout issues.

    Fresh AlmaLinux9.5 install
    140.00beta01 CMM, PHP 8.3

    Brian's fix worked with Centmin Mod installation clocking 430.2252 install time.

    Interestingly disabling Hetzner's Robot Firewall also stopped the timeouts without using Brian's fix - something seems to be blocking the connections.

    With the fix, my 101-sysctl.conf is empty only containing "# centminmod added" - could this cause any issues with performance or optimization?
     
    Last edited: Mar 16, 2025
  10. eva2000

    eva2000 Administrator Staff Member

    55,155
    12,249
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,825
    Local Time:
    7:59 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  11. BrianLT

    BrianLT New Member

    8
    1
    3
    Jan 19, 2025
    Ratings:
    +3
    Local Time:
    10:59 PM

    This issue only occurs on Dedicated Servers, whereas the Hetzner Cloud VPS works fine, even with the firewall enabled.

    However, I haven't tested it with Hetzner's Robot Firewall turned off—I keep it enabled on production servers since it's a reliable feature that has never caused problems.

    Regarding the empty 101-sysctl.conf, I use it that way on production servers without noticing any differences or issues.

    The solution might be to disable the CSF Firewall entirely or turn off Hetzner's Robot Firewall.

    For reference, my production servers run both CSF Firewall and Hetzner's Robot Firewall turned ON with equal/similar rules.

    But the real question is why the fix is empty the 101-sysctl.conf at the install.
    What does the 101-sysctl.conf has inside to cause some much trouble?
     
  12. eva2000

    eva2000 Administrator Staff Member

    55,155
    12,249
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,825
    Local Time:
    7:59 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    do you have a backup copy of the original and initial /etc/sysctl.d/101-sysctl.conf after Centmin Mod installation?

    if you can share /etc/sysctl.d/101-sysctl.conf contents would be helpful

    if not, if you re-run centmin.sh menu option 4 to recompile/reinstall/upgrade Nginx versions, it will trigger the opt_tcp function to repopulate /etc/sysctl.d/101-sysctl.conf if it detects it doesn't have settings it expects. So you have another opportunity to check contents of /etc/sysctl.d/101-sysctl.conf. If /etc/sysctl.d/101-sysctl.conf is repopulated, try running this command to check the settings set. The command will apply the 101-sysctl.conf settings and give you output
    Code (Text):
    sysctl --system

    share the output of this command in CODE/CODEB bbcode tags. How to use forum BBCODE code tags :)
     
  13. BrianLT

    BrianLT New Member

    8
    1
    3
    Jan 19, 2025
    Ratings:
    +3
    Local Time:
    10:59 PM
    I did share this already on this thread.

     
  14. redsy

    redsy Premium Member Premium Member

    3
    0
    1
    Mar 16, 2025
    Ratings:
    +1
    Local Time:
    10:59 PM
    Your 101-sysctl.conf is exactly the same as mine.

    I've tried replicating the Hetzner firewall rules the same as https://community.centminmod.com/th...plicate-csf-firewall-inbound-rule-sets.11433/ without success, it's a stateless firewall which only allows 10 rules and the configuration that seems to work is this rather insecure setup.

    Code:
    Incoming
    Version: ipv4
    Protocol: tcp
    Source IP: BLANK (0.0.0.0/0)
    Destination IP: BLANK (0.0.0.0/0)
    Source Port: 0-65535
    Destination Port: 0-65535
    TCP Flags: ack
    Action: accept
    (Outgoing rules are set to allow all)