Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Certbot deprecates operating system packages, “standardizes” on snaps

certbot.eff.org

Post reply on HN
Print view View original

1–10 of 57 posts

Re: Certbot deprecates operating system packages, “standardizes” on snaps

#3

Post by mmastrac »

JetSpiegel wrote: post #2

This was mentioned 2 months ago, but without traction. https://news.ycombinator.com/item?id=25141524 This is a ridiculous requirement for a glorified Python script, over-engineering at its worst.

This seems unnecessarily hostile. Certbot is a complex beast that generates TLS configurations, has multiple plugins that likely require specific system configuration, and is I think charitably more than "a glorified Python script".

The rationale makes sense for me:

"While the Certbot team tries to keep the Certbot packages offered by various operating systems working in the most basic sense, due to distribution policies and/or the limited resources of distribution maintainers, Certbot OS packages often have problems that other distribution mechanisms do not. The packages are often old resulting in a lack of bug fixes and features and a worse TLS configuration than is generated by newer versions of Certbot. They also may not configure certificate renewal for you or have all of Certbot’s plugins available. For reasons like these, we recommend most users follow the instructions at https://certbot.eff.org/instructions and OS packages are only documented here as an alternative."

Re: Certbot deprecates operating system packages, “standardizes” on snaps

#5

Post by bccdee »

mmastrac wrote: post #3
JetSpiegel wrote: post #2

This was mentioned 2 months ago, but without traction. https://news.ycombinator.com/item?id=25141524 This is a ridiculous requirement for a glorified Python script, over-engineering at its worst.

This seems unnecessarily hostile. Certbot is a complex beast that generates TLS configurations, has multiple plugins that likely require specific system configuration, and is I think charitably more than "a glorified Python script". The rationale makes sense for me: "While the Certbot team tries to keep the Certbot packages offered by various operating systems working in the most basic sense, due to distribution poli…

A distro-independent avenue for distribution could be important, but surely we can do better than snapd.

Re: Certbot deprecates operating system packages, “standardizes” on snaps

#8

Post by floatingatoll »

bccdee wrote: post #5
mmastrac wrote: post #3

Earlier quoted context omitted.

This seems unnecessarily hostile. Certbot is a complex beast that generates TLS configurations, has multiple plugins that likely require specific system configuration, and is I think charitably more than "a glorified Python script". The rationale makes sense for me: "While the Certbot team tries to keep the Certbot packages offered by various operating systems working in the most basic sense, due to distribution poli…

A distro-independent avenue for distribution could be important, but surely we can do better than snapd.

Have we done better, or is snapd the best option for their needs as of today?

Re: Certbot deprecates operating system packages, “standardizes” on snaps

#10

Post by bryogenic »

koolba wrote: post #6

This has likely been asked and answered before, but why not write something like this in something that can be statically compiled like go? Isn’t the whole thing just a couple of web requests and cert operations?

https://go-acme.github.io/lego/ is exactly that. This is the client/library underneath traefik's batteries included version of let's encrypt certs.
Post reply on HN