[SOLVED] Pve certificate Google DNS challenge not working

[Blackstone]

I'm trying to setup PVE to automatically challenge my DNS with the google cloud api but when i tell it to order my certificate i get an error. It keeps saying it cant access the directory /nonexistent/.config.

I dont know if i should post this here on or on another thread for acme.sh or gcloud.

And yes i have run gcloud init and setup my account credentials.

If you need more information please ask.


Loading ACME account details Placing ACME order Order URL: https://acme-v02.api.letsencrypt.org/acme/order/122819721/38222552320 Getting authorization details from 'https://acme-v02.api.letsencrypt.org/acme/authz-v3/47524900220' The validation for pve.*********.*** is pending! [Mon Nov 8 22:28:06 EST 2021] Using gcloud WARNING: Could not setup log file in /nonexistent/.config/gcloud/logs, (Error: Could not create directory [/nonexistent/.config/gcloud/logs/2021.11.08]: Permission denied. Please verify that you have permissions to write to the parent directory.. The configuration directory may not be writable. To learn more, see https://cloud.google.com/sdk/docs/configurations#creating_a_configuration WARNING: Could not open the configuration file: [/nonexistent/.config/gcloud/configurations/config_default]. ERROR: (gcloud.dns.managed-zones.list) You do not currently have an active account selected. Please run: $ gcloud auth login to obtain new credentials. If you have already logged in with a different account: $ gcloud config set account ACCOUNT to select an already authenticated account to use. [Mon Nov 8 22:28:07 EST 2021] _dns_gcloud_find_zone: Can't find a matching managed zone! Perhaps wrong project or gcloud credentials? [Mon Nov 8 22:28:07 EST 2021] Error add txt for domain:_acme-challenge.pve.*********.*** TASK ERROR: command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup gcloud pve.*********.***' failed: exit code 1

 

[Steven Alexson]

Here is a good forum post that would walk you though the setup: Google Domains and Let's Encrypt Certificates using DNS validation for local Proxmox servers. The article is from last year, so if you are running an current version of PVE, you won't need to do the last step (editing DNSChallenge.pm).

Good luck!