Update-Problems and lots of Monitoring alerts

A.Dent · 11. Oktober 2021

Hello all,

I'm new to OpenMediaVault. Just installed it a few weeks ago (~4). So I'm not familar with OMV yet. Pls move the thread to the appropriate category, if it's not correct in this one.

The system in short: ASRock Q1900M Board (Celeron J1900) with 4 GB RAM, Systemdrive is a Crucial 250 GB SSD, Datadrive (only one) is a Seagate Iron Wolf 4 TB.

No Add-ons, pure OMV ISO with prepared USB-Stick.

OMV is working well so far but I've recognized Update-Problems from the beginning. I decided to care later. Today the system startet to send lots of Monitoring alerts. Extract:

Along with that I saw that the graphs stopped somewhere around KW39. So I could not review the 'Resource limit succeeded' alerts, e.g. 'current mem usage = 90.1%'.

This one is probably of most interest:

Usually there is a Firewall Rule in place to prevent the OMV from accessing the internet. So I disabled this rule to perform an Update. First attempt was not successfull (Error Message follows). Did a reboot and tried again. Now some Updates where found and could be installed. Clicking 'Prüfen' (presumably Check in EN) again still results in this Error Message:

Code

Failed to execute command 'export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; 
export LANG=C.UTF-8; 
apt-get update 2>&1' with exit code '100': 
Get:1 file:/var/cache/openmediavault/archives InRelease Ign:1 file:/var/cache/openmediavault/archives InRelease 
Get:2 file:/var/cache/openmediavault/archives Release Ign:2 file:/var/cache/openmediavault/archives Release 
Get:3 file:/var/cache/openmediavault/archives Packages Ign:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Get:3 file:/var/cache/openmediavault/archives Packages Ign:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Get:3 file:/var/cache/openmediavault/archives Packages Ign:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Get:3 file:/var/cache/openmediavault/archives Packages Ign:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Get:3 file:/var/cache/openmediavault/archives Packages Ign:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Get:3 file:/var/cache/openmediavault/archives Packages Ign:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Get:3 file:/var/cache/openmediavault/archives Packages 
Get:4 file:/var/cache/openmediavault/archives Translation-en Ign:4 file:/var/cache/openmediavault/archives Translation-en 
Get:5 file:/var/cache/openmediavault/archives Translation-de_DE Ign:5 file:/var/cache/openmediavault/archives Translation-de_DE 
Get:6 file:/var/cache/openmediavault/archives Translation-de Ign:6 file:/var/cache/openmediavault/archives Translation-de 
Hit:7 http://debian.tu-bs.de/debian buster InRelease Ign:8 https://packages.openmediavault.org/public usul InRelease 
Hit:9 http://security.debian.org/debian-security buster/updates InRelease Ign:10 https://deb.debian.org/debian buster-backports InRelease 
Err:11 https://packages.openmediavault.org/public usul Release Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 178.254.11.33 443] 
Err:12 https://deb.debian.org/debian buster-backports Release Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 199.232.138.132 443] Reading package lists... E: The repository 'https://packages.openmediavault.org/public usul Release' no longer has a Release file. E: The repository 'https://deb.debian.org/debian buster-backports Release' no longer has a Release file.

Alles anzeigen

Pretty much the same as with the first attempt but a little shorter.

What's the problem here and how can I solve it?

Best regards,

A. Dent

macom · 11. Oktober 2021

Zitat von A.Dent

Usually there is a Firewall Rule in place to prevent the OMV from accessing the internet.

For you last attempt, did you disable the rule as well? It seems like there is still a firewall rule in place.

A.Dent · 11. Oktober 2021

Hello macom,

thx for the hint. On the one hand, yes, relating rule was disabled, but on the other hand there is also an UTM Appliance with a HTTPS Proxy in charge. I guess 'Certificate verification failed' is what you want to point me to?

I'll test but I'm in vacation until next week. So I'll test and update next week.

Best regards,

A. Dent

A.Dent · 20. Oktober 2021

Hello all,

according to the hint by macom

Code

https://packages.openmediavault.org/public
https://deb.debian.org/debian

have been excluded from the https proxy but to no avail. Still the same error in the certificate verification. Are there other requested targets to be added that did not show up in the log yet?

Is it possible to update by hand and how could I perform that?

Best regards,

A. Dent

A.Dent · 22. Oktober 2021

Hello all,

no one who can help?

Best regards,

A. Dent

macom · 22. Oktober 2021

Are you able to ping the two URLs or the two IPs from the error message?

A.Dent · 22. Oktober 2021

Yes, that's working:

Is it possible to update manually?

Or can I assign a second IP to my OMV (with only the onboard NIC)? That would allow me to put it temporary into a different network without that https proxy.

Best regards,

A. Dent

macom · 22. Oktober 2021

Zitat von A.Dent

Or can I assign a second IP to my OMV (with only the onboard NIC)?

Probably using macvlan.

Zitat von A.Dent

hat would allow me to put it temporary into a different network without that https proxy.

Why not do that with the IP you have?

A.Dent · 5. Januar 2022

Hello macom,

finally I could solve the problem. Thanks for assistance.

Now the update function is working with the UTM in place.

Best regards,

A. Dent

Update-Problems and lots of Monitoring alerts

A.Dent 11. Oktober 2021

macom 6. Januar 2022

Jetzt mitmachen!