Amazon Linux2 の AMI を元にEC2 インスタンスを起動しました。yum コマンドでパッケージ更新を試みましたが、以下 “Cannot find a valid baseurl for repo" となり、amazonlinux yumリポジトリにアクセスできない状況を経験しました。解決策を紹介します。
$ sudo yum list updates --security
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
One of the configured repositories failed (Unknown),
and yum doesn't have enough cached data to continue. At this point the only
safe thing yum can do is fail. There are a few ways to work "fix" this:
1. Contact the upstream for the repository and get them to fix the problem.
2. Reconfigure the baseurl/etc. for the repository, to point to a working
upstream. This is most often useful if you are using a newer
distribution release than is supported by the repository (and the
packages for the previous distribution release still work).
3. Run the command with the repository temporarily disabled
yum --disablerepo= ...
4. Disable the repository permanently, so yum won't use it by default. Yum
will then just ignore the repository until you permanently enable it
again or use --enablerepo for temporary usage:
yum-config-manager --disable
or
subscription-manager repos --disable=
5. Configure the failing repository to be skipped, if it is unavailable.
Note that yum will try to contact the repo. when it runs most commands,
so will have to try and fail each time (and thus. yum will be be much
slower). If it is a very temporary problem though, this is often a nice
compromise:
yum-config-manager --save --setopt=.skip_if_unavailable=true
Cannot find a valid baseurl for repo: amzn2-core/2/x86_64
解決策
Amazon Linux リポジトリは、S3 によって提供されています。そのため、プライベートサブネット(インターネットへのルートがないサブネット)に配置されたAmazon Linux 2 のEC2 であっても、VPC Endpoint を使用してAmazon Linux リポジトリへアクセスが可能です。