topic Re: With Open NX-OS with Nexus 9Kv, unable to reach github via http in DevNet Sandbox

With Open NX-OS with Nexus 9Kv, unable to reach github via http

gradhakr — Wed, 24 Jun 2020 11:13:42 GMT

Hi There,

I have reserved a Cisco Devnet Sandbox environment for Open NX-OS with Nexus9kv. I am connected to devbox as a developer, and am trying to follow the instructions at Cisco Live Kubernetes workshop at "https://github.com/CiscoSE/DEVWKS-2096-CLUS19/tree/master/kubernetes-on-nxos".

Am connected to the VPN of the sandbox, and i hit errors on git clone, at first i saw

(venv) [developer@devbox code]$git clone https://github.com/CiscoSE/DEVWKS-2096-CLUS19
Cloning into 'DEVWKS-2096-CLUS19'...
fatal: unable to access 'https://github.com/CiscoSE/DEVWKS-2096-CLUS19/': Could not resolve host: github.com; Unknown error
(venv) [developer@devbox code]$

Then i added the proxy setup, but still hitting a different error:

(venv) [developer@devbox sbx_nxos]$export HTTP_PROXY="http://proxy-wsa.esl.cisco.com:80"
(venv) [developer@devbox sbx_nxos]$export HTTPS_PROXY="http://proxy-wsa.esl.cisco.com:80"
(venv) [developer@devbox sbx_nxos]$git clone https://github.com/CiscoSE/DEVWKS-2096-CLUS19
Cloning into 'DEVWKS-2096-CLUS19'...
fatal: unable to access 'https://github.com/CiscoSE/DEVWKS-2096-CLUS19/': Could not resolve proxy: proxy-wsa.esl.cisco.com; Unknown error
(venv) [developer@devbox sbx_nxos]$

Any help on this would be highly helpful.

Thanks
Geetha

Re: With Open NX-OS with Nexus 9Kv, unable to reach github via http

omz — Wed, 24 Jun 2020 12:08:24 GMT

git clone to your local pc and then scp to dev box

Re: With Open NX-OS with Nexus 9Kv, unable to reach github via http

gradhakr — Thu, 25 Jun 2020 13:17:59 GMT

Thanks for your suggestion.

But this is not the only connection we need.

Am setting up kubernetes with the guide as https://github.com/CiscoSE/DEVWKS-2096-CLUS19/tree/master/kubernetes-on-nxos.

So after copying the cloned dir from local pc to devbox, when i run the k8s*.sh script, it still requires to resolve other http like:

=====================

(venv) [developer@devbox master-kubeadm]$bash k8s-master-setup.sh
/usr/sbin/setenforce: SELinux is disabled
net.ipv6.conf.all.disable_ipv6 = 1
Loaded plugins: fastestmirror
Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&infra=stock error was
14: curl#6 - "Could not resolve host: mirrorlist.centos.org; Unknown error"
http://mirrors.coreix.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: mirrors.coreix.net; Unknown error"

==========

Problem is that we should be able to reach the http servers, with the proxies configured.

I have configured:

export http_proxy=http://proxy.esl.cisco.com:8080
export https_proxy=http://proxy.esl.cisco.com:8080

And my /etc/resolv.conf is:

nameserver 64.102.6.247
nameserver 161.44.124.122

Thanks

Geetha

Re: With Open NX-OS with Nexus 9Kv, unable to reach github via http

bigevilbeard — Thu, 25 Jun 2020 14:02:13 GMT

Due to the security posture within the sandbox, you will not be able to clone repos are there is a limited policy on internet access. Given the date on the repo when the presentation was done I can assume this pre the security posture was implemented.

Hope this helps.