NethServer installation fails during Traefik installation behind a corporate proxy

Support
1

I am attempting to install NethServer on a fresh Debian Trixie virtual machine located behind a corporate HTTP proxy.

Installation method:

export http_proxy=http://proxy_ip:3128
export https_proxy=http://proxy_ip:3128
curl https://raw.githubusercontent.com/NethServer/ns8-core/ns8-stable/core/install.sh | bash

The installation script is downloaded successfully using the configured proxy, and the installation proceeds through the initial stages without any apparent issues. The required container images also appear to be pulled successfully.

However, the installation fails at the “Install Traefik” step. The installation stops with the following error:

Fetching https://distfeed.nethserver.org/ns8/updates/repodata.json: HTTPSConnectionPool(host='distfeed.nethserver.org', port=443): Max retries exceeded with url: /ns8/updates/repodata.json?view=latest (Caused by NewConnectionError("HTTPSConnection(host='distfeed.nethserver.org', port=443): Failed to establish a new connection: [Errno 101] Network is unreachable"))
Traceback (most recent call last):
  File "/var/lib/nethserver/cluster/actions/add-module/50update", line 84, in <module>
    image_url = cluster.modules.get_latest_module(request['image'], rdb)
  File "/usr/local/agent/pypkg/cluster/modules.py", line 182, in get_latest_module
    raise LatestModuleLookupError(module)
cluster.modules.LatestModuleLookupError: traefik

Expected behavior:
The installation should complete successfully.

2

Hi,

and welcome to NethServer Community.

Does it help to configure the proxy in /usr/share/containers/containers.conf?
See How to Run a Container with HTTP Proxy Configuration in Podman

3

Thanks, Markus.

As mentioned in the linked documentation, I configured the proxy environment variables in /usr/share/containers/containers.conf . I also created a systemd drop-in file at /etc/systemd/system/podman.service.d/override.conf and set the proxy as Environment variables for the podman service. Unfortunately, neither change appears to have resolved the issue.

To verify that containers receive the proxy environment variables, I ran an ubuntu container and confirmed that they are present:

root@neth-poc:~# podman run -it ubuntu /bin/bash -c 'printenv | sort'
HOME=/root
HOSTNAME=d5760c4e1510
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1
TERM=xterm
_=/usr/bin/printenv
container=podman
http_proxy=http://10.10.10.10:3128
https_proxy=http://10.10.10.10:3128

I also checked the proxy logs and found no connection attempts to distfeed.nethserver.net . I believe that Traefik is not using the configured proxy and is instead attempting to connect directly.

4

I can confirm that it’s not working using a proxy. I tested with squid and I blocked http/https traffic from the NS8 at the firewall.

I was able to install traefik via proxy…

runagent podman-pull-missing ghcr.io/nethserver/traefik:4.2.1
add-module ghcr.io/nethserver/traefik:4.2.1

…but creating the cluster fails with following error:
“Network connectivity check failed. Ensure the node can access Internet and DNS resolution is working”