When having vrfs configured attempting to run "update geoip" from op-mode fails:
vyos@vyos:~$ update geoip Error: Failed to download GeoIP database GeoIP not in use by firewall
Workaround is to first switch context into the vrf who can reach internet like so:
vyos@vyos:~$ force vrf INTERNET vyos@vyos:INTERNET:~$ update geoip Downloaded GeoIP database GeoIP not in use by firewall
Suggestion is that "update geoip" should get the same syntax as "add system image" where one from op-mode can specify which vrf the command should run under like so:
vyos@vyos:~$ update geoip vrf INTERNET