Imunify360 service is failing: urllib error while updating files, url: description.json, err:

Issue

• imunify360 or imunify-antivirus service is failing regularly:

  # service imunify-antivirus status
  Redirecting to /bin/systemctl status imunify-antivirus.service
  ● imunify-antivirus.service - ImunifyAV
  Loaded: loaded (/usr/lib/systemd/system/imunify-antivirus.service; enabled; vendor preset: disabled)
  Active: failed (Result: start-limit) since Sat 2020-09-19 16:24:30 EDT; 1min 12s ago
  Process: 14045 ExecStart=/usr/bin/imunify-service (code=exited, status=1/FAILURE)

• The following error can be found in /var/log/imunify360/error.log:

  defence360agent.files.UpdateError: urllib error while updating files, url: https://files.imunify360.com/static/sigs/v1/description.json, err: <urlopen error _ssl.c:712: The handshake operation timed out>
  ERROR [2020-10-27 03:49:19,699] defence360agent.files: sigs update error urllib error while updating files, url: https://files.imunify360.com/static/sigs/v1/description.json, err: <urlopen error _ssl.c:712: The handshake operation timed out>
  CRITICAL [2020-10-27 03:49:19,893] defence360agent.internals.logger: uncaught exception
  
  urllib error while updating files, url: https://files.imunify360.com/static/sigs/v1/description.json, err: <urlopen error _ssl.c:712: The handshake operation timed out>

• The file from the error message is accessible via IP4 but not via IPv6:

  # curl -6 -vs -o /dev/null https://files.imunify360.com/static/sigs/v1/description.json
  * About to connect() to files.imunify360.com port 443 (#0)
  * Trying 2604:4500:6:203f::7...
  * Failed to connect to 2604:4500:6:203f::7: Network is unreachable
  * couldn't connect to host at files.imunify360.com:443
  * Closing connection 0

Environment

• Imunify360
• ImunifyAV
• IPv6 connection

Solution

Resolve IPv6 connectivity issue or: force IP4 connection to the required URL by creating the file /etc/gai.conf with the following content:

# cat /etc/gai.conf
precedence ::ffff:0:0/96 100

Useful links

• gai.conf(5) — Linux manual page