When having vrfs configured attempting to run "update geoip" from op-mode fails:

vyos@vyos:~$ update geoip 
Error: Failed to download GeoIP database
GeoIP not in use by firewall

Workaround is to first switch context into the vrf who can reach internet like so:

vyos@vyos:~$ force vrf INTERNET

vyos@vyos:INTERNET:~$ update geoip
Downloaded GeoIP database
GeoIP not in use by firewall

Suggestion is that "update geoip" should get the same syntax as "add system image" where one from op-mode can specify which vrf the command should run under like so:

vyos@vyos:~$ update geoip vrf INTERNET