Trying to renew letsencript on Amazon Linux 2 using certbot and I get the following message:
Your system is not supported by certbot-auto anymore. Certbot cannot be installed.
I am totally lost and I do not know what to do. I cannot find any exhaustive documentation that gives a solution.
According to https://community.letsencrypt.org/t/certbot-1-9-0-release/135414 :
Changed
certbot-auto was deprecated on all systems except for those based on Debian or RHEL.
And from this website: https://community.letsencrypt.org/t/fail-to-detect-amazon-linux-2-certbot/136140
The best chance to get Certbot working on Amazon Linux 2 is to install the rpm from EPEL as described here: https://aws.amazon.com/blogs/compute/extending-amazon-linux-2-with-epel-and-lets-encrypt/
Here is instructions on how to install certbot on any system: https://certbot.eff.org/instructions
Particularly for Ubuntu 18.04 with Nginx webserver I was able to install certbot using the following commands:
snap install core
snap refresh core
snap install --classic certbot
Then you can run certbot using certbot command
What worked for me was to follow this part from Extending Amazon Linux 2 with EPEL official docs:
cd /tmp
wget -O epel.rpm –nv \
https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum install -y ./epel.rpm
sudo yum install python2-certbot-apache.noarch
After that, certbot renew started to work.
We dropped certbot altogether on our amazon linux as we couldn't install snapd. We are using getssl (another acme client) and it is looking good. getssl on github
For Ubuntu 16.04, Let’s Encrypt client (certbot). Reset or set up a new AWS Instance(Linux).
sudo apt install software-properties-common
sudo add-apt-repository ppa:certbot/certbot
sudo apt update
sudo apt install certbot python3-certbot-nginx
To check version number, run
certbot --version
Sample output:
certbot 0.31.0
sudo certbot --nginx --agree-tos --redirect --uir --hsts --staple-ocsp --must-staple -d www.example.com,example.com --email you@example.com
The official certbot docs recommend installing it using snapd but unfortunately you cannot install snapd on Amazon Linux 2 due to some missing selinux dependencies
sudo amazon-linux-extras install epel
sudo yum install -y certbot python-certbot-dns-route53
sudo python3 -m venv /opt/certbot/
sudo /opt/certbot/bin/pip install --upgrade pip
sudo /opt/certbot/bin/pip install certbot
sudo ln -s /opt/certbot/bin/certbot /usr/bin/certbot
sudo /opt/certbot/bin/pip install certbot-dns-route53