3 ms·

I agree with some of the comments, title should be not letsencrypt but certbot, the provided implementation of certifying your server. At least for Ubuntu 20.0

I agree with some of the comments, title should be not letsencrypt but certbot, the provided implementation of certifying your server. At least for Ubuntu 20.04, Letsencrypt does not require you to install the Python stack for certbot anymore and switched to a Snapd package. Although at least I had to install Snapd for that matter.

jacquesm 6y ago
But that would require upgrading to Ubuntu 20.04, which is a major operation in its own right. And it's not as if snap is without problems of its own.
- dcomp 6y ago
  For the record, snapd is available all the way back to 14.04 [1] I use acme.sh with dns, it just plonks a certificate in a directory of your choice and runs a reload command of your choice. I actually upload the certificate into a kubernetes cluster. All repeated by cron [1] https://snapcraft.io/docs/installing-snap-on-ubuntu https://snapcraft.io/docs/installing-snap-on-ubuntu
- robaman 6y ago
  I recently successfully switched to the latest version of Certbot using snap on a Ubuntu 16.04 server. Tried doing the same with a Ubuntu 14.04 server. That failed totally while installing snapd on it, which replaced existing upstart init system with systemd. This caused no services to start on next reboot.
rlpb 6y ago
Note that the availability of snaps is both distro and release -independent. > At least for Ubuntu 20.04, Letsencrypt does not require you to install the Python stack for certbot anymore and switched to a Snapd package. To be clear: the snap is available and maintained by upstream. If you want the latest version of Certbot directly from upstream then the snap is the easiest way to get it. However Ubuntu 20.04 itself also ships the deb as packaged so you can use that if you want, and the "pip install" method in a virtualenv also works (but IMHO is the least maintainable method; it's more useful as a building block for other mechanisms).

jacquesm 6y ago

But that would require upgrading to Ubuntu 20.04, which is a major operation in its own right. And it's not as if snap is without problems of its own.

dcomp 6y ago
For the record, snapd is available all the way back to 14.04 [1] I use acme.sh with dns, it just plonks a certificate in a directory of your choice and runs a reload command of your choice. I actually upload the certificate into a kubernetes cluster. All repeated by cron [1] https://snapcraft.io/docs/installing-snap-on-ubuntu https://snapcraft.io/docs/installing-snap-on-ubuntu
robaman 6y ago
I recently successfully switched to the latest version of Certbot using snap on a Ubuntu 16.04 server. Tried doing the same with a Ubuntu 14.04 server. That failed totally while installing snapd on it, which replaced existing upstart init system with systemd. This caused no services to start on next reboot.

rlpb 6y ago

Note that the availability of snaps is both distro and release -independent. > At least for Ubuntu 20.04, Letsencrypt does not require you to install the Python stack for certbot anymore and switched to a Snapd package. To be clear: the snap is available and maintained by upstream. If you want the latest version of Certbot directly from upstream then the snap is the easiest way to get it. However Ubuntu 20.04 itself also ships the deb as packaged so you can use that if you want, and the "pip install" method in a virtualenv also works (but IMHO is the least maintainable method; it's more useful as a building block for other mechanisms).