[SOLVED] Letsencrypt & certbot not supported anymore

L

lilp

Renowned Member
Feb 10, 2016
63
1
73
36
Hello,
I've a container on Debian Buster 10 for reverse proxy with Nginx, Certbot and Letsencrypt.
Everything worked fine until about a month after the certificate expired.
I wanted to renew it as usual via :
Code: 
/opt/letsencrypt/letsencrypt-auto --force-renew
But I've this error :
Code: 
Skipping bootstrap because certbot-auto is deprecated on this system.
Your system is not supported by certbot-auto anymore.
Certbot cannot be installed.
Please visit https://certbot.eff.org/ to check for other alternatives.

So I follow instructions and try to install Snapd with :
Code: 
su root
apt update
apt install snapd
When I try to install core by :
Code: 
snap install core
But I've this result :
Code: 
error: system does not fully support snapd: cannot mount squashfs image using
       "squashfs": mount: /tmp/sanity-mountpoint-162433065: mount failed:
       Opération non permise.

I don't know how to resolve it and have my https certificate again.
 
Last edited:
any reason not to simply install the certbot package from debian buster inside the container?
`apt install certbot`

That should work in a container (and also get updated regularly)

I hope this helps!
 
  • Like
Reactions: hmohr
Certbot still installed.
When I triey to update certificate, I've this error:
Code: 
Skipping bootstrap because certbot-auto is deprecated on this system.
Your system is not supported by certbot-auto anymore.
Certbot cannot be installed.
Please visit https://certbot.eff.org/ to check for other alternatives.
 
lilp said:
Certbot still installed.
Click to expand...
yes - but not from the debian package - but rather somehow manually - my suggestion was to remove the manual installation and install the debian package (that way you'll get updates and it should continue to work)

The observation is based on
lilp said:
/opt/letsencrypt/letsencrypt-auto --force-renew
Click to expand...
/opt/letsencrypt being the place where certbot is installed
 
At first I was tempted to install certbot from Debian packages but:
  1. Given how often Certbot gets updated and the amount of changes each new version brings in.
  2. Given the recommended way to install it is to use snap
In the end I decided to find a way to install the snapd package and make it work. This is what worked for me:

https://github.com/lxc/lxc/issues/1854#issuecomment-606241047

I hope it helps.

P.S. Yes, I also love APT, but... hopefully the certbot package will be updated constantly through the backports or updates repositories :-/
 
  • Like
Reactions: Shaaarnir
jsabater said:
At first I was tempted to install certbot from Debian packages but:
  1. Given how often Certbot gets updated and the amount of changes each new version brings in.
  2. Given the recommended way to install it is to use snap
In the end I decided to find a way to install the snapd package and make it work. This is what worked for me:

https://github.com/lxc/lxc/issues/1854#issuecomment-606241047

I hope it helps.

P.S. Yes, I also love APT, but... hopefully the certbot package will be updated constantly through the backports or updates repositories :-/
Click to expand...
Unfortunately, this didn't solve my issue.
But it gave me direction to the solution of the problem.

I have LXC with Ubuntu 18.04 LTS

I installed new certbot via pip3:
apt install python3-pip pip3 install setuptools-rust pip3 install certbot pip3 show certbot Name: certbot Version: 1.22.0

And certbot is working now:
certbot certonly --preferred-chain "ISRG Root X1" --standalone -d My.Domain.Com
 
You must log in or register to reply here.
Top Bottom