Oracle Linux 10 – dnf update fails with metadata download timeout behind proxy – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Package updates fail because repository metadata cannot be fetched through the enterprise proxy, leaving security patches unapplied.

Environment & Reproduction

Occurs on hosts that require HTTP or HTTPS proxy for outbound traffic.

dnf makecache
dnf update -y

Root Cause Analysis

Proxy variables are missing, incorrect, or blocked by firewall policy, causing metadata request timeouts.

Quick Triage

Confirm proxy and DNS reachability first.

env | grep -i proxy
curl -I https://cdn.redhat.com
journalctl -u NetworkManager -n 50

Step-by-Step Diagnosis

Enable debug output and inspect repo access details.

dnf -v makecache
grep -R proxy /etc/yum.repos.d /etc/dnf/dnf.conf

Solution – Primary Fix

Set proxy in DNF configuration and validate certificate trust chain.

sudo tee -a /etc/dnf/dnf.conf <<'EOF'
proxy=http://proxy.example.com:8080
EOF
sudo dnf clean all
sudo dnf makecache

Solution – Alternative Approaches

Use a local mirror or Satellite content source when direct internet egress is restricted.

dnf config-manager --set-enabled rhel-10-baseos-rpms

Verification & Acceptance Criteria

Metadata and package updates complete without timeout errors.

dnf repolist
dnf check-update

Rollback Plan

Remove proxy line and restore previous DNF config if dependency flow breaks.

sudo sed -i '/^proxy=/d' /etc/dnf/dnf.conf
sudo dnf clean all

Prevention & Hardening

Standardize proxy settings with configuration management and monitor dnf failures from logs.

journalctl -p warning -g dnf --since '24 hours ago'

Related Errors & Cross-Refs

Could also appear as Curl error 28, SSL connect error, or repository unavailable errors.

Related tutorial: View the step-by-step tutorial for oracle-linux-10.

View all oracle-linux-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

RHEL DNF and repository configuration documentation from Red Hat.