[solved] AUR Permission Denied

n43 · 2024-07-27 22:29:56

hi all, i got permission denied on AUR repo since a few weeks
i got same error with yay or paru
but i can install from chaotic-aur.

❯ paru -S lmstudio-appimage
:: Résolution des dépendances...
:: Calcul des conflits...
:: Calcul des conflits internes...

Dépôt (2)              Ancienne Version  Nouvelle Version  Make Only
extra/clblast                            1.6.3-1           Non
extra/opencl-headers                     2:2024.05.08-1    Non

Aur (1)                Ancienne Version  Nouvelle Version  Make Only
aur/lmstudio-appimage                    0.2.28-1          Non

:: Procéder à la relecture ? [O/n] 

:: Téléchargement des PKGBUILDs...
erreur : command failed: /home/n43/.cache/paru/clone: git clone --no-progress -- [url]https://aur.archlinux.org/lmstudio-appimage[/url] lmstudio-appimage:
    Clonage dans 'lmstudio-appimage'...
    fatal : impossible de se connecter à aur.archlinux.org :
    aur.archlinux.org[0: 2a01:4f9:c010:50::1]: errno=Permission non accordée
    aur.archlinux.org[1: 95.216.144.15]: errno=Aucun chemin d'accès pour atteindre l'hôte cible

all help are welcome, thx in advance

Last edited by n43 (2024-07-31 22:13:37)

mpan · 2024-07-27 23:53:04

Hello,

I used automatic translation on your messages, so the response may not be accurate. While reporting errors, please post English outputs:

LANG=C command…

The errors seem unrelated to Arch’s services. The messages indicate your network is not working properly. Either the network itself is misconfigured or your ISP is meddling with the trafic.

n43 · 2024-07-31 02:38:34

hi, and thx>
i can ping aur repo
i can curl the repo address too:
but i cant git clone it:

❯ ping aur.archlinux.org
PING aur.archlinux.org (2a01:4f9:c010:50::1) 56 data bytes
64 bytes from aur.archlinux.org (2a01:4f9:c010:50::1): icmp_seq=1 ttl=51 time=132 ms
64 bytes from aur.archlinux.org (2a01:4f9:c010:50::1): icmp_seq=2 ttl=51 time=48.9 ms
^C
--- aur.archlinux.org ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 48.863/90.488/132.114/41.625 ms

❯ curl https://aur.archlinux.org/lmstudio-appimage.git | head
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 10201  100 10201    0     0  26535      0 --:--:-- --:--:-- --:--:-- 26565
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml"
      xml:lang="en" lang="en" >
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

    <!-- CSS -->
    <link rel="stylesheet" href="/static/css/archweb.css">
    <link rel="stylesheet" href="/static/css/aurweb.css">

❯ git clone https://aur.archlinux.org/lmstudio-appimage.git
Cloning into 'lmstudio-appimage'...
fatal: unable to connect to aur.archlinux.org:
aur.archlinux.org[0: 2a01:4f9:c010:50::1]: errno=Permission denied
aur.archlinux.org[1: 95.216.144.15]: errno=No route to host

Last edited by n43 (2024-07-31 02:39:22)

gromit · 2024-07-31 06:23:27

Could you post the output of "GIT_TRACE=1 GIT_CURL_VERBOSE=1 git clone https://aur.archlinux.org/lmstudio-appimage.git"?

seth · 2024-07-31 06:24:34

Do you expect to have no IPv4 lease/route? Do you have a publically routable IPv6?

ip a # your IPv6 will show up there, xxx everything but the first two blocks

Is your system time ok?

Is there a firewall/pahole/etc. in the way? What does curl do to get to the url?

curl -v https://aur.archlinux.org/lmstudio-appimage.git > /dev/null

mpan · 2024-07-31 13:48:19

Ok, so there is some network connectivity and the host is reachable. This doesn’t mean there is no network misconfiguration, but let’s try other things first.

In light of `connect` causing errno EACCES, which shouldn’t be possible for INET/INET6 connections, something is off. Do you run in a container, including some firejail etc., did you enable SELinux, do you run some all-encompassing antivirus suite?

My questions don’t invalidate gromit’s and seth’s: please respond to them too.

n43 · 2024-07-31 18:44:03

❯ GIT_TRACE=1 GIT_CURL_VERBOSE=1 git clone https://aur.archlinux.org/lmstudio-appimage.git
20:39:58.865709 git.c:472               trace: built-in: git clone https://aur.archlinux.org/lmstudio-appimage.git
Cloning into 'lmstudio-appimage'...
fatal: unable to connect to aur.archlinux.org:
aur.archlinux.org[0: 2a01:4f9:c010:50::1]: errno=Permission denied
aur.archlinux.org[1: 95.216.144.15]: errno=No route to host

all was working good since some update 1 month ago
my network is ok, no firewall rules
only AUR repo is impackted
chaotic or extra are good

i can curl AUR repo but i cant clone them

❯ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: enp44s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
    link/ether a0:36:bc:67:55:d7 brd ff:ff:ff:ff:ff:ff
3: wlo1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether b0:3c:dc:d2:a8:e3 brd ff:ff:ff:ff:ff:ff
    altname wlp0s20f3
    inet 192.168.0.73/24 brd 192.168.0.255 scope global dynamic noprefixroute wlo1
       valid_lft 41823sec preferred_lft 41823sec
    inet6 2a01:e0a:xxx:xxxx:xxx:xxxx:xxxx:xxxx/64 scope global dynamic noprefixroute 
       valid_lft 86334sec preferred_lft 86334sec
    inet6 fe80::xxxx.x..xxxxxxx/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: vmnet1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000
    link/ether 00:50:56:c0:00:01 brd ff:ff:ff:ff:ff:ff
    inet 172.16.1.1/24 brd 172.16.1.255 scope global vmnet1
       valid_lft forever preferred_lft forever
    inet6 fe80::250:56ff:fec0:1/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
5: vmnet8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000
    link/ether 00:50:56:c0:00:08 brd ff:ff:ff:ff:ff:ff
    inet 192.168.121.1/24 brd 192.168.121.255 scope global vmnet8
       valid_lft forever preferred_lft forever
    inet6 fe80::250:56ff:fec0:8/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
6: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 02:42:fc:1c:0f:23 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever

no selinux, no antivirus, no custom firewall, no isp blocking trafik (is working on another computer on the same network)
i have try WiFi Tethering of my mobile phone but got the same permission denied

Last edited by n43 (2024-07-31 20:18:29)

seth · 2024-07-31 19:42:32

You do have an IPv4 lease, I guess vmnet1 or vmnet8 get in the way.

ip r get 95.216.144.15
ip r
ping 95.216.144.15

You may want to edit your post and redact the line that starts w/ "inet6 2a01:e0a:" to "inet6 2a01:e0a:xxx:xxxx:xxx:xxxx:xxxx:xxxx/64 scope global dynamic noprefixroute" as that's a publically routable IPv6 in France

n43 · 2024-07-31 20:16:33

❯ ip r get 95.216.144.15
95.216.144.15 via 192.168.0.1 dev wlo1 src 192.168.0.73 uid 1000 
    cache 
❯ ip r
default via 192.168.0.1 dev wlo1 proto dhcp src 192.168.0.73 metric 600 
172.16.1.0/24 dev vmnet1 proto kernel scope link src 172.16.1.1 
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 
192.168.0.0/24 dev wlo1 proto kernel scope link src 192.168.0.73 metric 600 
192.168.121.0/24 dev vmnet8 proto kernel scope link src 192.168.121.1 
❯ ping 95.216.144.15
PING 95.216.144.15 (95.216.144.15) 56(84) bytes of data.
64 bytes from 95.216.144.15: icmp_seq=1 ttl=53 time=53.3 ms
64 bytes from 95.216.144.15: icmp_seq=2 ttl=53 time=103 ms
64 bytes from 95.216.144.15: icmp_seq=3 ttl=53 time=47.2 ms
^C
--- 95.216.144.15 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2004ms
rtt min/avg/max/mdev = 47.179/67.924/103.269/25.117 ms

the ipv4 lease is on wlo1 192.168.0.73 => 192.168.0.1 is my isp fiber router
vmnet1 or vmnet8 are my vmware Workstation vlan gateway

the system time is up to date

Last edited by n43 (2024-07-31 20:27:24)

seth · 2024-07-31 20:41:19

Is there anything weird in your ~/.gitconfig ? Does it work w/ a fresh user?

n43 · 2024-07-31 20:55:29

i think no:

❯ cat ~/.gitconfig
[user]
	email = xxx@xxxxxx
	name = xxx
[filter "lfs"]
	smudge = git-lfs smudge -- %f
	process = git-lfs filter-process
	required = true
	clean = git-lfs clean -- %f
[url "git@github.com:"]
	insteadOf = https://github.com/
[url "git://"]
	insteadOf = https://

seth · 2024-07-31 21:03:25

I think yes, try to remove the last block.

mpan · 2024-07-31 21:15:54

Note: if seth’s suggestion works, I’d consider it avoiding the problem, not solving the underlying issue.

Changing the protocol shouldn’t make `connect` fail with EACCES/~~EHOSTUNREACH.~~⁽¹⁾

I’ll not force you to investigate beyond what’s needed to access AUR, but please keep in mind something is off. It may manifest itself again in the future.

Cheers!
____
⁽¹⁾ (Edit 2024-08-01) As discovered below, it’s Arch’s infra that generates ICMP 3,13. So this part is not an issue on OP’s end.

Last edited by mpan (2024-08-01 16:16:43)

seth · 2024-07-31 21:17:49

Yes "should" …
The error is certainly vastly misleading, but try for yourself:

git clone git://aur.archlinux.org/lmstudio-appimage.git

will get you precisely that if you don't have a gitconfig for your AUR account.

Edit: if at all, I'm using ssh://aur@aur.archlinux.org, no idea whether git:// works in any configuration.

Last edited by seth (2024-07-31 21:20:41)

n43 · 2024-07-31 22:06:33

thx, it's working now after removing the last block

seth · 2024-07-31 22:10:44

The git:// protocol is largely deprecated/unsupported anyway, so there's probably no downside to that. Otherwise you'll have to be more nimble for the url replacement.

Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

mpan · 2024-08-01 16:28:09

seth wrote:

Yes "should" …The error is certainly vastly misleading, but try for yourself:(…)

I tried:

 $ git clone 'git://aur.archlinux.org/lmstudio-appimage.git'
Cloning into 'lmstudio-appimage'...
fatal: unable to connect to aur.archlinux.org:
aur.archlinux.org[0: 95.216.144.15]: errno=No route to host
aur.archlinux.org[1: 2a01:4f9:c010:50::1]: errno=Network is unreachable

I don’t see any ENOACCES.

There is ENETUNREACH for IPv6, which is expected on this machine.

There is an EHOSTUNREACH for IPv4. It seems to be generated by Arch’s end, not OP’s, so I edited the previous message to reflect this. I didn’t expect ICMP 3,13 to be sent instead of RST+ACK.

Arch Linux

#1 2024-07-27 22:29:56

[solved] AUR Permission Denied

#2 2024-07-27 23:53:04

Re: [solved] AUR Permission Denied

#3 2024-07-31 02:38:34

Re: [solved] AUR Permission Denied

#4 2024-07-31 06:23:27

Re: [solved] AUR Permission Denied

#5 2024-07-31 06:24:34

Re: [solved] AUR Permission Denied

#6 2024-07-31 13:48:19

Re: [solved] AUR Permission Denied

#7 2024-07-31 18:44:03

Re: [solved] AUR Permission Denied

#8 2024-07-31 19:42:32

Re: [solved] AUR Permission Denied

#9 2024-07-31 20:16:33

Re: [solved] AUR Permission Denied

#10 2024-07-31 20:41:19

Re: [solved] AUR Permission Denied

#11 2024-07-31 20:55:29

Re: [solved] AUR Permission Denied

#12 2024-07-31 21:03:25

Re: [solved] AUR Permission Denied

#13 2024-07-31 21:15:54

Re: [solved] AUR Permission Denied

#14 2024-07-31 21:17:49

Re: [solved] AUR Permission Denied

#15 2024-07-31 22:06:33

Re: [solved] AUR Permission Denied

#16 2024-07-31 22:10:44

Re: [solved] AUR Permission Denied

#17 2024-08-01 16:28:09

Re: [solved] AUR Permission Denied

Board footer