[SOLVED] Letsencrypt & certbot not supported anymore

lilp

Well-Known Member
Feb 10, 2016
37
1
48
35
Hello,
I've a container on Debian Buster 10 for reverse proxy with Nginx, Certbot and Letsencrypt.
Everything worked fine until about a month after the certificate expired.
I wanted to renew it as usual via :
Code:
/opt/letsencrypt/letsencrypt-auto --force-renew
But I've this error :
Code:
Skipping bootstrap because certbot-auto is deprecated on this system.
Your system is not supported by certbot-auto anymore.
Certbot cannot be installed.
Please visit https://certbot.eff.org/ to check for other alternatives.

So I follow instructions and try to install Snapd with :
Code:
su root
apt update
apt install snapd
When I try to install core by :
Code:
snap install core
But I've this result :
Code:
error: system does not fully support snapd: cannot mount squashfs image using
       "squashfs": mount: /tmp/sanity-mountpoint-162433065: mount failed:
       Opération non permise.

I don't know how to resolve it and have my https certificate again.
 
Last edited:
any reason not to simply install the certbot package from debian buster inside the container?
`apt install certbot`

That should work in a container (and also get updated regularly)

I hope this helps!
 
  • Like
Reactions: hmohr
Certbot still installed.
When I triey to update certificate, I've this error:
Code:
Skipping bootstrap because certbot-auto is deprecated on this system.
Your system is not supported by certbot-auto anymore.
Certbot cannot be installed.
Please visit https://certbot.eff.org/ to check for other alternatives.
 
Certbot still installed.
yes - but not from the debian package - but rather somehow manually - my suggestion was to remove the manual installation and install the debian package (that way you'll get updates and it should continue to work)

The observation is based on
/opt/letsencrypt/letsencrypt-auto --force-renew
/opt/letsencrypt being the place where certbot is installed
 
At first I was tempted to install certbot from Debian packages but:
  1. Given how often Certbot gets updated and the amount of changes each new version brings in.
  2. Given the recommended way to install it is to use snap
In the end I decided to find a way to install the snapd package and make it work. This is what worked for me:

https://github.com/lxc/lxc/issues/1854#issuecomment-606241047

I hope it helps.

P.S. Yes, I also love APT, but... hopefully the certbot package will be updated constantly through the backports or updates repositories :-/
 
  • Like
Reactions: Shaaarnir
At first I was tempted to install certbot from Debian packages but:
  1. Given how often Certbot gets updated and the amount of changes each new version brings in.
  2. Given the recommended way to install it is to use snap
In the end I decided to find a way to install the snapd package and make it work. This is what worked for me:

https://github.com/lxc/lxc/issues/1854#issuecomment-606241047

I hope it helps.

P.S. Yes, I also love APT, but... hopefully the certbot package will be updated constantly through the backports or updates repositories :-/
Unfortunately, this didn't solve my issue.
But it gave me direction to the solution of the problem.

I have LXC with Ubuntu 18.04 LTS

I installed new certbot via pip3:
apt install python3-pip pip3 install setuptools-rust pip3 install certbot pip3 show certbot Name: certbot Version: 1.22.0

And certbot is working now:
certbot certonly --preferred-chain "ISRG Root X1" --standalone -d My.Domain.Com
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!