Skip Certbot and use the more powerful and versatile tool acme.sh
Certbot deprecates operating system packages, “standardizes” on snaps
11–20 of 57 posts
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#12The Docker images are an option as well: https://hub.docker.com/r/certbot/certbot/
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#13This has likely been asked and answered before, but why not write something like this in something that can be statically compiled like go? Isn’t the whole thing just a couple of web requests and cert operations?
I switched over to acme.sh, a bash version. I wasn't holding out much hope when I first tried it, but honestly it's worked great!
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#14Literally just switched from Ubuntu to Debian to get away from snaps
Same here but Let’s Encrypt suggests you install snap on Debian and use snap to install certbot.
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#15Snaps require you to allow each publisher to automatically push arbitrary software updates to your machine, and snap deliberately does not allow you to disable this misfeature. It's not a bug or an oversight -- it's part of the design of snap, and it's not going to change.
Handing out the keys to the kingdom like this is supremely annoying on a desktop (e.g. Windows 10), but it's completely unacceptable on a server.
This is a terrible move, and they should absolutely walk it back.
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#16Skip Certbot and use the more powerful and versatile tool acme.sh http://acme.sh
My favourite ACME client is dehydrated https://github.com/dehydrated-io/dehydrated
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#17Just to clarify something I think a lot of replies don't understand: The Ubuntu Certbot packages have been horribly broken for well over a year, probably at least two.
The PPA for Certbot includes updates of a lot of OS packages, with with incompatibilities with other Ubuntu provided packages. I've spent hours tracking down and fixing the problems that have come from installing certbot via apt.
Usually, I'm much more a fan of native packages than snaps or similar, but in this case it makes a lot of sense.
Here is a link to the Github Issue: https://github.com/certbot/certbot/issues/5234#event-3691151...
(Edit: Adding issue link)
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#18I'll stop using certbot before I install snap.
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#19If y'all want to try a high-magic solution based on a single-host docker-compose setup with traefik 2+ as ingress, here is the paragraph for configuring Let's encrypt certs: https://github.com/rocdata/rocserver/blob/main/docker-compos... It works great.
Host just needs to have ports 80 443 open and docker installed: https://github.com/rocdata/rocserver/blob/main/fabfile.py#L2...
PS: In case I can save anyone days of debugging, if you want to run a wordpress container using this setup, you'll need to do some manual config to convince wp it's running in HTTPS mode, see https://wordpress.org/support/article/administration-over-ss...
Re: Certbot deprecates operating system packages, “standardizes” on snaps
#20This has likely been asked and answered before, but why not write something like this in something that can be statically compiled like go? Isn’t the whole thing just a couple of web requests and cert operations?
https://go-acme.github.io/lego/ is exactly that. This is the client/library underneath traefik's batteries included version of let's encrypt certs.
Oh that’s exactly what I’m talking about. No funky deps. No virtualenv. No python versions. That looks perfect.