The reason certbot-auto didn't work is because it doesn't ship with the Cloudflare plugin.
You can do this to force certbot-auto to work
sudo su -
cd /opt/eff.org/certbot
source venv/bin/activate
pip install certbot-dns-cloudflare
deactivate
and then try renew.