certbot in a jail

[bako]

Any idea how to get cerbot/lets encrypt in a jail?

Tried to run this...

[root@abyss /mnt/MAIN/HOME/binary]# jexec 7 sh
# pkg install py36-certbot
Updating iocage-plugins repository catalogue...
iocage-plugins repository is up to date.
All repositories are up to date.
pkg: No packages available to install matching 'py36-certbot' have been found in the repositories

 

[Jailer]

The correct package is py37-certbot.

https://www.freshports.org/security/py-certbot/

 

[danb35]

Any idea how to get cerbot/lets encrypt in a jail?

Using any client other than certbot would really be a good start--I mostly use acme.sh.

 

[bako]

The correct package is py37-certbot.

https://www.freshports.org/security/py-certbot/

same thing ... not available in a jail

 

[danb35]

not available in a jail

A normal jail, or a plugin jail? The latter don't have the same package repos available.

 

[bako]

Using any client other than certbot would really be a good start--I mostly use acme.sh.

Please elaborate. I'm not that familiar with this new type of SSL CA stuff.

 

[bako]

A normal jail, or a plugin jail? The latter don't have the same package repos available.

plugin jail. I'm mucking around with the nextcloud plugin to use SSL/TLS.

 

[danb35]

Let's Encrypt issues certs using the ACME protocol, and requires client software using that protocol in order to obtain a cert. Certbot is just one such piece of client software, but there are many others:

ACME Client Implementations - Let's Encrypt

Last updated: Jul 22, 2023 | See all Documentation Let’s Encrypt uses the ACME protocol to verify that you control a given domain name and to issue you a certificate. To get a Let’s Encrypt certificate, you’ll need to choose a piece of ACME client software to use. The ACME clients below are...

letsencrypt.org

I don't agree with their "recommendation" for most purposes, as it's a tangled mess of dependencies which tries to do far too much for most purposes. I use it sometimes because it has good support for acme-dns, but I generally prefer acme.sh:

GitHub - acmesh-official/acme.sh: A pure Unix shell script implementing ACME client protocol

A pure Unix shell script implementing ACME client protocol - acmesh-official/acme.sh

github.com

 

[danb35]

plugin jail.

There's your problem.

I'm mucking around with the nextcloud plugin to use SSL/TLS.

Someone wrote a script to install Nextcloud, including automatic TLS configuration--you might want to look into it.

 

[bako]

Someone wrote a script to install Nextcloud, including automatic TLS configuration--you might want to look into it.

A general script or a Freenas script?

 

[danb35]

A FreeNAS script. You'll find it in the resources section.

 

[KevDog]

Someone wrote a script to install Nextcloud, including automatic TLS configuration--you might want to look into it.

@danb35
Ha -- good one.

 

[bako]

Ha -- good one.

... is there a joke I'm not aware of? lol...

 

[Redcoat]

.. is there a joke I'm not aware of? lol...

Someone wrote a script

Look who "Someone" is...