I just ran the centmin updater and it produced a long list of yum updates. running that does not work. see: Code: # yum update --disableplugin=priorities --setopt=deltarpm=0 --enablerepo=remi No matches found for the following disable plugin patterns: priorities Last metadata expiration check: 0:13:29 ago on Thu Feb 13 18:00:00 2025. Error: Problem 1: package iptables-services-1.8.10-4.1.el9.noarch from @System require s (iptables-libs = 1.8.10-4.el9 or iptables-libs = 1.8.10-4.el9_4), but none of the providers can be installed - cannot install both iptables-libs-1.8.10-11.el9_5.x86_64 from baseos and ipt ables-libs-1.8.10-4.el9_4.x86_64 from @System - cannot install both iptables-libs-1.8.10-4.el9_4.x86_64 from baseos and ipta bles-libs-1.8.10-11.el9_5.x86_64 from baseos - cannot install the best update candidate for package iptables-services-1.8.1 0-4.1.el9.noarch - cannot install the best update candidate for package iptables-libs-1.8.10-4. el9_4.x86_64 - package iptables-libs-1.8.10-4.el9_4.i686 from baseos is filtered out by exc lude filtering Problem 2: problem with installed package iptables-services-1.8.10-4.1.el9.noar ch - package iptables-services-1.8.10-4.1.el9.noarch from @System requires (iptab les-libs = 1.8.10-4.el9 or iptables-libs = 1.8.10-4.el9_4), but none of the prov iders can be installed - package iptables-services-1.8.10-4.1.el9.noarch from epel requires (iptables -libs = 1.8.10-4.el9 or iptables-libs = 1.8.10-4.el9_4), but none of the provide rs can be installed - cannot install both iptables-libs-1.8.10-11.el9_5.x86_64 from baseos and ipt ables-libs-1.8.10-4.el9_4.x86_64 from @System - cannot install both iptables-libs-1.8.10-4.el9_4.x86_64 from baseos and ipta bles-libs-1.8.10-11.el9_5.x86_64 from baseos - package iptables-devel-1.8.10-11.el9_5.x86_64 from appstream requires iptabl es-libs(x86-64) = 1.8.10-11.el9_5, but none of the providers can be installed - cannot install the best update candidate for package iptables-devel-1.8.10-4 .el9_4.x86_64 - package iptables-libs-1.8.10-4.el9_4.i686 from baseos is filtered out by exc lude filtering (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only bes t candidate packages) I ran with the --allowerasing flag as it denoted to try and seems to run ok. Just thought i'd let you know that there's some conflicts in the latest dependencies.
This can indeed happen. When new package updates are released, not all mirrors update simultaneously. If your package manager pulls metadata from a mirror that isn’t fully synchronized, you might see a mix of old and new dependency references. This can lead to conflicts like the one you experienced with iptables. Essentially, the system’s metadata might indicate a dependency on an older version, while the best candidate from another mirror is newer, creating a version mismatch. Over time, as all mirrors sync completely, these issues generally resolve themselves. In this case it's EPEL repo behind on updates. Reported on AlmaLinux forums too Update Problem // baseos does not belong to a distupgrade repository can you run these 2 commands and provide the output Code (Text): yum -q history list find the command where you ran --allowerasing and note the yum transaction id on the left and then run this command where XX is that transaction id Code (Text): yum -q history info XX lets see what --allowerasing did to YUM packages. I suspect --allowerasing removed some YUM packages without replacing them as the newer YUM packages do not exist in EPEL right now, so probably best to undo/reverse the YUM --allowerasing command and wait for EPEL to update with newer packages Code (Text): yum history undo XX also run command to see history for iptables-services YUM transactions Code (Text): yum -q history iptables-services If any transactions exist, you can inspect them Code (Text): yum -q history info XX edit: though interesting on my test Almalinux 9 server, iptables-service isn't installed though it's intended to be from inspecting routines Code (Text): yum -q list iptables-services --showduplicates | tr -s ' ' | column -t Available Packages iptables-services.noarch 1.8.10-4.1.el9 epel Code (Text): yum -q list installed iptables* | tr -s ' ' | column -t Installed Packages iptables-libs.x86_64 1.8.10-11.el9_5 @baseos iptables-nft.x86_64 1.8.10-11.el9_5 @baseos iptables-nft-services.noarch 1.8.10-11.el9_5 @appstream iptables-utils.x86_64 1.8.10-11.el9_5 @baseos Though Almalinux forum thread user mentions Ansible forces iptables-services YUM package install so if you installed Ansible, probably explain why or other YUM packages you installed depend/install it.
Seems to have the same issue Code: # yum update --disableplugin=priorities --setopt=deltarpm=0 --enablerepo=remi No matches found for the following disable plugin patterns: priorities Last metadata expiration check: 0:00:09 ago on Fri Feb 14 10:23:53 2025. Error: Problem 1: package iptables-services-1.8.10-4.1.el9.noarch from @System requires (iptables-libs = 1.8.10-4.el9 or iptables-libs = 1.8.10-4.el9_4), but none of the providers can be installed - cannot install both iptables-libs-1.8.10-11.el9_5.x86_64 from baseos and iptables-libs-1.8.10-4.el9_4.x86_64 from @System - cannot install both iptables-libs-1.8.10-4.el9_4.x86_64 from baseos and iptables-libs-1.8.10-11.el9_5.x86_64 from baseos - cannot install the best update candidate for package iptables-services-1.8.10-4.1.el9.noarch - cannot install the best update candidate for package iptables-libs-1.8.10-4.el9_4.x86_64 - package iptables-libs-1.8.10-4.el9_4.i686 from baseos is filtered out by exclude filtering Problem 2: problem with installed package iptables-services-1.8.10-4.1.el9.noarch - package iptables-services-1.8.10-4.1.el9.noarch from @System requires (iptables-libs = 1.8.10-4.el9 or iptables-libs = 1.8.10-4.el9_4), but none of the providers can be installed - package iptables-services-1.8.10-4.1.el9.noarch from epel requires (iptables-libs = 1.8.10-4.el9 or iptables-libs = 1.8.10-4.el9_4), but none of the providers can be installed - cannot install both iptables-libs-1.8.10-11.el9_5.x86_64 from baseos and iptables-libs-1.8.10-4.el9_4.x86_64 from @System - cannot install both iptables-libs-1.8.10-4.el9_4.x86_64 from baseos and iptables-libs-1.8.10-11.el9_5.x86_64 from baseos - package iptables-devel-1.8.10-11.el9_5.x86_64 from appstream requires iptables-libs(x86-64) = 1.8.10-11.el9_5, but none of the providers can be installed - cannot install the best update candidate for package iptables-devel-1.8.10-4.el9_4.x86_64 - package iptables-libs-1.8.10-4.el9_4.i686 from baseos is filtered out by exclude filtering (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
these are the 3 lines from the 13th. other entries are old. it doesn't really say the whole line, so i'm not sure which one to run. I suspect it's 122: Code: # yum -q history list ID | Command line | Date and time | Action(s) | Altered ------------------------------------------------------------------------------------------------------- 122 | update --disableplugin=priorities --setopt=delta | 2025-02-13 18:18 | C, E, I, U | 53 EE 121 | -y install ImageMagick-libs ImageMagick ImageMag | 2025-02-13 18:08 | Install | 7 120 | -y remove ImageMagick ImageMagick-c++ ImageMagic | 2025-02-13 18:07 | Removed | 7 EE Code: # yum -q history iptables-services ID | Command line | Date and time | Action(s) | Altered --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 122 | update --disableplugin=priorities --setopt=deltarpm=0 --enablerepo=remi --allowerasing | 2025-02-13 18:18 | C, E, I, U | 53 E< I do not have Ansible (that i know of....). I picked up some more yum updates today (kernel, etc) and all still seems fine.
you can ignore this and exclude iptables from yum updates until EPEL repo gets iptables-services version update Code (Text): yum update --disableplugin=priorities --setopt=deltarpm=0 --enablerepo=remi -x iptables* or just run regular yum update Code (Text): yum update should be able to inspect the YUM transaction and what it did using history info command for that specific transaction 122 Code (Text): yum -q history info 122
Code: yum -q history info 122 Transaction ID : 122 Begin time : Thu Feb 13 18:18:31 2025 Begin rpmdb : 8a5fc9121b28871c513b4ea71870bb12648f5839631400b3b0b871fd558e92b4 End time : Thu Feb 13 18:20:06 2025 (95 seconds) End rpmdb : aa82b64d34d73d70f3aae63bbe436a0e4356a76bb2801ed5526368acf04da341 User : root <root> Return-Code : Success Releasever : 9 Command Line : update --disableplugin=priorities --setopt=deltarpm=0 --enablerepo=remi --allowerasing Comment : Packages Altered: Install kernel-devel-5.14.0-503.23.1.el9_5.x86_64 @appstream Install kernel-5.14.0-503.23.1.el9_5.x86_64 @baseos Install kernel-core-5.14.0-503.23.1.el9_5.x86_64 @baseos Install kernel-modules-5.14.0-503.23.1.el9_5.x86_64 @baseos Install kernel-modules-core-5.14.0-503.23.1.el9_5.x86_64 @baseos Upgrade bzip2-devel-1.0.8-10.el9_5.x86_64 @appstream Upgraded bzip2-devel-1.0.8-8.el9.x86_64 @@System Upgrade iptables-devel-1.8.10-11.el9_5.x86_64 @appstream Upgraded iptables-devel-1.8.10-4.el9_4.x86_64 @@System Upgrade iptables-nft-services-1.8.10-11.el9_5.noarch @appstream Upgraded iptables-nft-services-1.8.10-4.el9_4.noarch @@System Upgrade kernel-headers-5.14.0-503.23.1.el9_5.x86_64 @appstream Upgraded kernel-headers-5.14.0-503.22.1.el9_5.x86_64 @@System Upgrade openssl-devel-1:3.2.2-6.el9_5.1.x86_64 @appstream Upgraded openssl-devel-1:3.2.2-6.el9_5.x86_64 @@System Upgrade qemu-guest-agent-17:9.0.0-10.el9_5.2.x86_64 @appstream Upgraded qemu-guest-agent-17:9.0.0-10.el9_5.x86_64 @@System Upgrade tzdata-java-2025a-1.el9.noarch @appstream Upgraded tzdata-java-2024b-2.el9.noarch @@System Upgrade almalinux-gpg-keys-9.5-2.el9.x86_64 @baseos Upgraded almalinux-gpg-keys-9.5-1.el9.x86_64 @@System Upgrade almalinux-release-9.5-2.el9.x86_64 @baseos Upgraded almalinux-release-9.5-1.el9.x86_64 @@System Upgrade almalinux-repos-9.5-2.el9.x86_64 @baseos Upgraded almalinux-repos-9.5-1.el9.x86_64 @@System Upgrade bzip2-1.0.8-10.el9_5.x86_64 @baseos Upgraded bzip2-1.0.8-8.el9.x86_64 @@System Upgrade bzip2-libs-1.0.8-10.el9_5.x86_64 @baseos Upgraded bzip2-libs-1.0.8-8.el9.x86_64 @@System Upgrade grub2-common-1:2.06-93.el9_5.alma.1.noarch @baseos Upgraded grub2-common-1:2.06-92.el9.alma.1.noarch @@System Upgrade grub2-efi-x64-1:2.06-93.el9_5.alma.1.x86_64 @baseos Upgraded grub2-efi-x64-1:2.06-92.el9.alma.1.x86_64 @@System Upgrade grub2-pc-1:2.06-93.el9_5.alma.1.x86_64 @baseos Upgraded grub2-pc-1:2.06-92.el9.alma.1.x86_64 @@System Upgrade grub2-pc-modules-1:2.06-93.el9_5.alma.1.noarch @baseos Upgraded grub2-pc-modules-1:2.06-92.el9.alma.1.noarch @@System Upgrade grub2-tools-1:2.06-93.el9_5.alma.1.x86_64 @baseos Upgraded grub2-tools-1:2.06-92.el9.alma.1.x86_64 @@System Upgrade grub2-tools-efi-1:2.06-93.el9_5.alma.1.x86_64 @baseos Upgraded grub2-tools-efi-1:2.06-92.el9.alma.1.x86_64 @@System Upgrade grub2-tools-extra-1:2.06-93.el9_5.alma.1.x86_64 @baseos Upgraded grub2-tools-extra-1:2.06-92.el9.alma.1.x86_64 @@System Upgrade grub2-tools-minimal-1:2.06-93.el9_5.alma.1.x86_64 @baseos Upgraded grub2-tools-minimal-1:2.06-92.el9.alma.1.x86_64 @@System Upgrade ipset-7.11-11.el9_5.x86_64 @baseos Upgraded ipset-7.11-8.el9.x86_64 @@System Upgrade ipset-libs-7.11-11.el9_5.x86_64 @baseos Upgraded ipset-libs-7.11-8.el9.x86_64 @@System Upgrade iptables-libs-1.8.10-11.el9_5.x86_64 @baseos Upgraded iptables-libs-1.8.10-4.el9_4.x86_64 @@System Upgrade iptables-nft-1.8.10-11.el9_5.x86_64 @baseos Upgraded iptables-nft-1.8.10-4.el9_4.x86_64 @@System Upgrade iptables-utils-1.8.10-11.el9_5.x86_64 @baseos Upgraded iptables-utils-1.8.10-4.el9_4.x86_64 @@System Upgrade kernel-tools-5.14.0-503.23.1.el9_5.x86_64 @baseos Upgraded kernel-tools-5.14.0-503.22.1.el9_5.x86_64 @@System Upgrade kernel-tools-libs-5.14.0-503.23.1.el9_5.x86_64 @baseos Upgraded kernel-tools-libs-5.14.0-503.22.1.el9_5.x86_64 @@System Upgrade libnfnetlink-1.0.1-23.el9_5.x86_64 @baseos Upgraded libnfnetlink-1.0.1-21.el9.x86_64 @@System Upgrade linux-firmware-whence-20250114-146.3.el9_5.noarch @baseos Upgraded linux-firmware-whence-20241121-146.2.el9_5.noarch @@System Upgrade openssl-1:3.2.2-6.el9_5.1.x86_64 @baseos Upgraded openssl-1:3.2.2-6.el9_5.x86_64 @@System Upgrade openssl-libs-1:3.2.2-6.el9_5.1.x86_64 @baseos Upgraded openssl-libs-1:3.2.2-6.el9_5.x86_64 @@System Upgrade os-prober-1.77-12.el9_5.x86_64 @baseos Upgraded os-prober-1.77-10.el9.x86_64 @@System Upgrade python3-perf-5.14.0-503.23.1.el9_5.x86_64 @baseos Upgraded python3-perf-5.14.0-503.22.1.el9_5.x86_64 @@System Upgrade sos-4.8.2-1.el9_5.noarch @baseos Upgraded sos-4.8.1-1.el9_5.alma.1.noarch @@System Upgrade tzdata-2025a-1.el9.noarch @baseos Upgraded tzdata-2024b-2.el9.noarch @@System Upgrade ipset-devel-7.11-11.el9_5.x86_64 @crb Upgraded ipset-devel-7.11-8.el9.x86_64 @@System Upgrade percona-release-1.0-30.noarch @prel-release-noarch Upgraded percona-release-1.0-29.noarch @@System Removed iptables-services-1.8.10-4.1.el9.noarch @@System Reason Change kernel-5.14.0-503.14.1.el9_5.x86_64 @baseos Removed kernel-5.14.0-503.21.1.el9_5.x86_64 @@System Reason Change kernel-core-5.14.0-503.14.1.el9_5.x86_64 @baseos Removed kernel-core-5.14.0-503.21.1.el9_5.x86_64 @@System Reason Change kernel-devel-5.14.0-503.14.1.el9_5.x86_64 @appstream Removed kernel-devel-5.14.0-503.21.1.el9_5.x86_64 @@System Reason Change kernel-modules-5.14.0-503.14.1.el9_5.x86_64 @baseos Removed kernel-modules-5.14.0-503.21.1.el9_5.x86_64 @@System Reason Change kernel-modules-core-5.14.0-503.14.1.el9_5.x86_64 @baseos Removed kernel-modules-core-5.14.0-503.21.1.el9_5.x86_64 @@System Scriptlet output: 1 * Enabling the Percona Release repository 2 <*> All done! 3 * Enabling the Percona Telemetry repository 4 <*> All done! 5 * Enabling the PMM2 Client repository 6 <*> All done! 7 The percona-release package now contains a percona-release script that can enable additional repositories for our newer products. 8 9 Note: currently there are no repositories that contain Percona products or distributions enabled. We recommend you to enable Percona Distribution repositories instead of individual product repositories, because with the Distribution you will get not only the database itself but also a set of other componets that will help you work with your database. 10 11 For example, to enable the Percona Distribution for MySQL 8.0 repository use: 12 13 percona-release setup pdps8.0 14 15 Note: To avoid conflicts with older product versions, the percona-release setup command may disable our original repository for some products. 16 17 For more information, please visit: 18 https://docs.percona.com/percona-software-repositories/percona-release.html 19 20 /usr/sbin/weak-modules: line 1086: cd: /lib/modules/5.14.0-503.21.1.el9_5.x86_64/weak-updates: No such file or directory 21 Removed "/etc/systemd/system/multi-user.target.wants/iptables.service". 22 Removed "/etc/systemd/system/multi-user.target.wants/ip6tables.service". 23 Warning: The unit file, source configuration file or drop-ins of iptables.service changed on disk. Run 'systemctl daemon-reload' to reload units. 24 Warning: The unit file, source configuration file or drop-ins of ip6tables.service changed on disk. Run 'systemctl daemon-reload' to reload units. 25 Couldn't write '0' to 'net/ipv4/tcp_tw_recycle', ignoring: No such file or directory
yeah as I expected, --allowerasing removed the YUM package without updating it as EPEL repo doesn't have a newer version yet Code (Text): Removed iptables-services-1.8.10-4.1.el9.noarch