Certbot autorenew失败
今天,我有一个certbot autorenew失败。用于续订证书的cron脚本失败,并且证书过期。下面是日志,其中包括在最后我ssh'ing到框中手动运行certbot-auto renew --standalone --no-self-upgrade
命令来解决问题。Certbot autorenew失败
我的问题是 - 这确实显示了证书更新错误的根源?它与今天的GitHub中断有关吗,还是另一个问题?我可以做些什么来避免这种情况呢?
这是一个运行更新脚本cron作业(LE-renew.log是下面的日志文件的名称):
30 2 * * 1 /usr/local/sbin/certbot-auto renew >> /var/log/le-renew.log
LE-renew.log:
...(more duplicate logfile entries above)
Get:21 http://http.debian.net jessie/main Sources [7,054 kB]
Err http://ppa.launchpad.net jessie/main amd64 Packages
404 Not Found
Ign http://ppa.launchpad.net jessie/main Translation-en_US
Ign http://ppa.launchpad.net jessie/main Translation-en
Get:22 http://http.debian.net jessie/main amd64 Packages [6,789 kB]
Get:23 http://http.debian.net jessie/main Translation-en [4,582 kB]
Fetched 1,083 kB in 9s (113 kB/s)
apt-get update hit problems but continuing anyway...
Reading package lists...
Building dependency tree...
Reading state information...
augeas-lenses is already the newest version.
libaugeas0 is already the newest version.
gcc is already the newest version.
libffi-dev is already the newest version.
libssl-dev is already the newest version.
openssl is already the newest version.
python is already the newest version.
python-dev is already the newest version.
python-virtualenv is already the newest version.
virtualenv is already the newest version.
The following packages will be upgraded:
ca-certificates
1 upgraded, 0 newly installed, 0 to remove and 83 not upgraded.
Need to get 207 kB of archives.
After this operation, 92.2 kB disk space will be freed.
Do you want to continue? [Y/n] Abort.
Bootstrapping dependencies for Debian-based OSes... (you can skip this with --no-bootstrap)
Ign http://http.debian.net jessie InRelease
Hit https://deb.nodesource.com jessie InRelease
Get:1 http://security.debian.org jessie/updates InRelease [63.1 kB]
Get:2 http://http.debian.net jessie-updates InRelease [145 kB]
Hit http://http.debian.net jessie Release.gpg
Hit http://http.debian.net jessie Release
Get:3 https://deb.nodesource.com jessie/main Sources [762 B]
Get:4 http://http.debian.net jessie-updates/main Sources [15.7 kB]
Get:5 https://deb.nodesource.com jessie/main amd64 Packages [966 B]
Get:6 https://deb.nodesource.com jessie/main Translation-en_US [162 B]
Get:7 https://deb.nodesource.com jessie/main Translation-en [162 B]
Get:8 http://http.debian.net jessie-updates/main amd64 Packages/DiffIndex [8,392 B]
Get:9 http://http.debian.net jessie-updates/main Translation-en/DiffIndex [3,196 B]
Get:10 https://deb.nodesource.com jessie/main Translation-en_US [162 B]
Get:11 https://deb.nodesource.com jessie/main Translation-en [162 B]
Get:12 https://deb.nodesource.com jessie/main Translation-en_US [162 B]
Hit http://security.debian.org jessie/updates/main Sources
Hit http://security.debian.org jessie/updates/main amd64 Packages
Get:13 https://deb.nodesource.com jessie/main Translation-en [162 B]
Get:14 https://deb.nodesource.com jessie/main Translation-en_US [162 B]
Hit http://security.debian.org jessie/updates/main Translation-en
Get:15 https://deb.nodesource.com jessie/main Translation-en [162 B]
Get:16 https://deb.nodesource.com jessie/main Translation-en_US [162 B]
Ign https://deb.nodesource.com jessie/main Translation-en_US
Get:17 https://deb.nodesource.com jessie/main Translation-en [162 B]
Ign https://deb.nodesource.com jessie/main Translation-en
Get:18 http://http.debian.net jessie/main Sources [7,054 kB]
Get:19 http://http.debian.net jessie/main amd64 Packages [6,789 kB]
Get:20 http://http.debian.net jessie/main Translation-en [4,582 kB]
Ign http://ppa.launchpad.net jessie InRelease
Ign http://ppa.launchpad.net jessie Release.gpg
Ign http://ppa.launchpad.net jessie Release
Err http://ppa.launchpad.net jessie/main amd64 Packages
404 Not Found
Ign http://ppa.launchpad.net jessie/main Translation-en_US
Ign http://ppa.launchpad.net jessie/main Translation-en
Fetched 221 kB in 9s (23.8 kB/s)
apt-get update hit problems but continuing anyway...
Reading package lists...
Building dependency tree...
Reading state information...
augeas-lenses is already the newest version.
libaugeas0 is already the newest version.
gcc is already the newest version.
libffi-dev is already the newest version.
libssl-dev is already the newest version.
openssl is already the newest version.
python is already the newest version.
python-dev is already the newest version.
python-virtualenv is already the newest version.
virtualenv is already the newest version.
The following packages will be upgraded:
ca-certificates
1 upgraded, 0 newly installed, 0 to remove and 70 not upgraded.
Need to get 207 kB of archives.
After this operation, 92.2 kB disk space will be freed.
Do you want to continue? [Y/n] Abort.
Upgrading certbot-auto 0.13.0 to 0.16.0...
Replacing certbot-auto...
Creating virtual environment...
Installing Python packages...
Installation succeeded.
-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/example.com.conf
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
new certificate deployed without reload, fullchain is
/etc/letsencrypt/live/example.com/fullchain.pem
-------------------------------------------------------------------------------
Congratulations, all renewals succeeded. The following certs have been renewed:
/etc/letsencrypt/live/example.com/fullchain.pem (success)
的跳转出来给我最重要的事情是,你在这里的操作问题:
今天我不得不a certbot autorenew failure。用于续订 证书的cron脚本失败,和我的证书到期。
你为什么要等到最后一天可能续约?您可以每天运行certbot,并且它会续约在未来30天内过期的任何事情。这应该会给你更多的时间来诊断和应对单次发行失败。
你也应该监控为失败的cron作业。无论是通过外部服务,还是通过某种方式通知cron作业失败。也许试试here的答案。
有趣 - 我的cron作业_does_运行每星期一 - 我已经更新了我的问题,包括cron任务,它运行的脚本。我原以为这只会在有效期内续约,但如果您的评论是正确的,那么续约在过去30天似乎每个星期一都会失败...... – YPCrumble
然后您也有一个监控问题。我个人只运行[caddy](https://caddyserver.com),它自动管理证书和续订。 – captncraig
你的日志显示没有certbot失败,只是容易日志。 – captncraig
@captncraig这就是我的想法 - 但更新肯定失败。我在哪里可以找到正确的日志?或者是404日志中的罪魁祸首? – YPCrumble
https://askubuntu.com/a/56811/342069可以帮助找到的cron输出 – captncraig