πŸ“– ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution – Primary Fix
  7. Solution – Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

dnf update and dnf makecache hang or fail with Curl error 28, causing delayed patching windows and stale package metadata across RHEL 8 hosts.

Environment & Reproduction

On RHEL 8.8 and 8.10 with intermittent WAN latency, run dnf clean all && dnf makecache and observe frequent timeout or repomd.xml download failures.

Root Cause Analysis

The active mirror list selects slow endpoints, and proxy or DNS latency amplifies request retries, so dnf cannot complete metadata refresh in time.

Quick Triage

Check name resolution and route stability, then test repo reachability with curl and review recent package-manager events using journalctl -u dnf-makecache.

Step-by-Step Diagnosis

Run dnf repolist -v, inspect baseurl and metalink settings, verify subscription status, and read /var/log/dnf.log plus journalctl for repeated timeout signatures.

Illustrative mockup for rhel-8 β€” dnf-mirror-timeout-problem
dnf update failing with mirror timeout messages β€” Illustrative mockup β€” Progressive Robot

Solution – Primary Fix

Pin reliable baseurl entries, increase timeout and retries in /etc/dnf/dnf.conf, run dnf clean all, then validate with dnf makecache and a full dnf update.

Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Illustrative mockup for rhel-8 β€” dnf-mirror-timeout-fix
Successful dnf makecache after repo tuning β€” Illustrative mockup β€” Progressive Robot

Solution – Alternative Approaches

Use a local caching proxy, configure Satellite mirrors, or schedule retries during low-traffic windows to reduce mirror-selection instability.

Verification & Acceptance Criteria

dnf makecache completes without errors, dnf update lists packages normally, and no timeout bursts appear in journalctl or dnf logs for 24 hours.

Rollback Plan

Restore original repo files from backup, revert dnf.conf timeout changes, clear cache again, and re-test the previous behavior to isolate config regressions.

Prevention & Hardening

Maintain internal mirrors, monitor repo latency, keep firewalld egress rules explicit, and document dnf proxy standards in baseline host configuration.

Compare with subscription-manager repo disabled issues and certificate validation failures that also surface as dnf metadata download problems on RHEL 8.

Related tutorial: View the step-by-step tutorial for rhel-8.

View all rhel-8 tutorials on the Tutorials Hub β†’

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Review Red Hat dnf and subscription-manager guidance, mirror best practices, and enterprise patch management runbooks for RHEL 8 estates.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today β€” we respond within one business day.