Upgrade VMware NSX-T to 4.2 – failed to download nub on edge

Note: This fixed the Issue for me – be sure you have Backups and snapshots!

Issue

Updating NSX-T from 4.0 to 4.2 the Edge updates failed with message „Download and verify bundle failed with msg: stopped the pause stream!“ – One EDGE Gateway was update correctly, the second failed.

Rebooting the Gateway and check file system of device „/dev/mapper/nsx-image“ won’t fix the issue. So, the file system isn’t corrupted.

Solution

Searching the logs in „/var/log/syslog“ and found the curl command to download the nub file and the user who want to do it:

...
2025-10-07T04:16:12.109Z <hostname> NSX 964 - [nsx@6876 comp="nsx-edge" subcomp="upgrade-agent" tid="1210" level="INFO"] Upgrade nub download '/usr/bin/curl -vs --insecure --retry 5 --max-time 1801 --retry-max-time 1801 -o /var/vmware/nsx/file-store/VMware-NSX-edge-4.2.3.1.0.24954573.nub http://<nsx-ip>:8080/repository/4.2.3.1.0.24954727/Edge/nub/VMware-NSX-edge-4.2.3.1.0.24954573.nub'
...
2025-10-07T04:16:12.117Z <hostname> NSX 964 - [nsx@6876 comp="nsx-edge" subcomp="upgrade-agent" tid="1210" level="ERROR" errorCode="MPA50007"] Error downloading nub 'http://<nsx-ip>:8080/repository/4.2.3.1.0.24954727/Edge/nub/VMware-NSX-edge-4.2.3.1.0.24954573.nub', output msg: , error msg: * Trying <nsx-ip>…#012* TCP_NODELAY set#012* Connected to <nsx-ip> (<nsx-ip>) port 8080 (#0)#012> GET /repository/4.2.3.1.0.24954727/Edge/nub/VMware-NSX-edge-4.2.3.1.0.24954573.nub HTTP/1.1#015#012> Host: <nsx-ip>:8080#015#012> User-Agent: curl/7.58.0#015#012> Accept: /#015#012> #015#012< HTTP/1.1 200 OK#015#012< Content-Type: application/octet-stream#015#012< Accept-Ranges: bytes#015#012< Content-Length: 34232320#015#012< Date: Tue, 07 Oct 2025 04:16:09 GMT#015#012< Server: #015#012< #015#012{ [11525 bytes data]#012* Failed writing body (0 != 11525)#012* stopped the pause stream!#012* Closing connection 0#012
...

Running the curl command as root user was successful, the connection is fine. Running curl as user nsx failed. Inspecting the folder and comparing to the second edge – the folder has gid 33 and it is not solveable to a name – the second edge has group name www-data. Looking to /etc/group the www-data group has not the gid 33 – it was 1007. I changed the group id to 33, reboot and changes the folder permission „chmod a+w /var/vmware/nsx/file-store/“ – Now, update works!

In short words

$ groupmod -g 33 www-data
$ chmod a+w /var/vmware/nsx/file-store/