Firstly I tested with a TurnKey Core (64 bit) v13.0 OVZ container, but then I thought maybe to be fair that I should test installing from ISO in a KVM VM (mainly as you mention the kernel package in your post).

But I am unable to reproduce your issue (although I only did the updates as part of the install/initial config). It does take a while, but they all download fine and once downloaded the install goes quite quickly.

So my first guess is that there is something up with your network. Either you have a firewall or a proxy that is blocking access; or there is something else stopping internet access... I'm only guessing though...

It should eventually time out. If so perhaps try some troubleshooting such as pinging websites to see what happens...

You said that you were using the "latest" core distribution. What version and what distribution? Just checking if you are building the image yourself or downloading the image and what type of image. You didn't say. ISO, OVF, other?

You also didn't say what target machine you are intending to use. For example, if your target machine is a cloud vmware VM, then you could try the ovf instead of the ISO if that is giving you trouble.

Just a suggestion.

And TBH I have no idea. AFAIK Debian security isn't mirrored so we should have been downloading from the same server. But I can't explain why downloading the kernel package is fine for me but an issue for you.

It's a dirty workaround but perhaps you could try downloading the deb manually.

cd /var/cache/apt/archives
wget http://security.debian.org/debian-security/pool/updates/main/l/linux/linux-image-3.2.0-4-amd64_3.2.60-1+deb7u3_amd64.deb

Note here is the full url (with a space so it doesn't hide part of it): http://security.debian.org/debian-security/pool/updates/main/l/linux /linux-image-3.2.0-4-amd64_3.2.60-1+deb7u3_amd64.deb

The only other thing I could think, is are you using the same ISO for all your installs? If so have you double checked the hash of it? It may pay to on the off chance there is a minor corruption.

I did a few Google searches and there are a few people experiencing a similar problem. In all cases it is being attributed by the  bug analysers to a network timeout issue. Jeremy's first root cause assumption is quite possible the correct one.

Some attributed it to the ISP, the firewall, Wifi.

Solutions include adjustment to wget timeout or wget continuation option . Unfortunately these would require an adjustment to the wget parameters which would be an adjustment to the ISO.

Suggested next step:

--------------------------

1) If you are using Wifi you might switch to a wired connection and see if that fixes it.

2) Restate your problem. It doesn't sound like you have a problem with the installation, just the security patching. If Jeremy provides you with the security patching script you may be able to adjust the script to use the wget timeout / continuation options described in the links above.

By the way...what country are you in and what ISP are you using?

What if you commented out the offending wget. Does ithe security script complete properly? If it does then just download the troublesome deb file. upload it to the server and load it manually.

Just a thought.

Hi Ole,

Click on the following link provided by Jeremy above and see if you can download the deb. If you can't then that is your problem.

http://security.debian.org/debian-security/pool/updates/main/l/linux/lin...

I have put the kernel deb in my dropbox. Try downloading that... (link below). FWIW as a general rule I would not recommend trusting anyone for kernel binary downloads (except Debian themselves) but for the purposes of trying to pin down the issue...

https://dl.dropboxusercontent.com/u/1624002/wheezy-security-kernel/linux...

Also I did a nslookup on security.debian.org and it seems that it resolves to 7 different IPs - 3 IPv6 ones & 4 IPv4 ones... So perhaps one of them has a corrupt file?

TBH though it surprises me that I can find no one else complaining of this exact issue anywhere online. I would expect at least some mention of it somewhere if it was an issue on the server...

http://security.debian.org/debian-security/pool/updates/main/l/linux/lin...

Click this...

http://security.debian.org/debian-security/pool/updates/main/l/linux/lin...

It is just a 22.3MB download from a mirror. If you can't download it then that is your problem. You will need to figure out why that is happening. I would suggest you contact your ISP.

If you can't download from the link I provided go to the following website and try downloading directly from a mirror in a country close to yours

https://www.debian.org/mirror/list-full

Search for the word

security

to find the mirrors supporting security patch downloads.

Now that you have a success you can explore your options to find the one that works best for you.

Regarding debain mirrors...the files are not faulty. The downloads that don't work for you work fine for me and Jeremy in Australia. The likely issue is that your ISPs don't have decent capacity on their international links or are throttling their accounts. If I were you I would take the link I sent you above and email it to your ISP support and get them to explain why you can't download it.

Best of luck :-)

FWIW Tim, I agree that it is worth following up with ISP - to actually get the issue resolved (properly). I guess a workaround for now would be to change the repo url in /etc/apt/sources.list.d/security.list (to the mirror that works).

Regardless though, I'm glad we (sort of) resolved it. And thanks tons for your invaluable input (again) Tim! :)

Happy to take some credit for methodical questions but you certainly get the credit for quick diagnosis. You got it right on the first go without having to ask any questions at all. Nicely done :-)