DO NOT MERGE! Hack around the Fedora metalink issues.

Replace metalink= with baseurl= which should be stable right now...

Use the URL of a mirror that is known to work (mirror.pnl.gov seems to
be the one that is broken, it is also hit by download.fedoraproject.org.)

Tested: vagrant up.