My operating system is (include version): Ubuntu 14.04.4 LTS
My hosting provider, if applicable, is: AWS
I can login to a root shell on my machine (yes or no, or I don't know): yes
Hi,
I used webroot method to create a cert and created a cron script for auto renewal. The thing is when I manually run the cron script, it works perfectly. But when running by cron, it always fails.
Here is my cron script:
Note: This is auto-generated file.
@daily root /home/someuser/letsencrypt/letsencrypt-renew.sh domain-name1
The letsencrypt-renew.sh script basically does some checking of the existing cert's expiry date and if less than 30 days, it will start the renewal process. The renewal part looks like this:
log_fn "Certificate expires in ${DAYS_EXP} days."
log_fn "Start renewal process..."
if ! ${CURRDIR}/letsencrypt-auto renew >> ${LOGFILE} 2>&1 ; then
log_fn "Automated renewal process failed. Exiting..."
exit
fi
My log file shows that the cronjob always yields a failure in renewal process:
Wed Sep 28 00:00:01 UTC 2016 Certificate expires in 18 days.
Wed Sep 28 00:00:01 UTC 2016 Start renewal process...
Bootstrapping dependencies for Debian-based OSes...
Ign http:// us-west-2.ec2.archive.ubuntu.com trusty InRelease
Get:1 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates InRelease [65.9 kB]
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty Release.gpg
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty Release
Get:2 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates/main Sources [383 kB]
Get:3 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates/universe Sources [165 kB]
Get:4 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates/main amd64 Packages [900 kB]
Get:5 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates/universe amd64 Packages [375 kB]
Get:6 http:// security.ubuntu.com trusty-security InRelease [65.9 kB]
Get:7 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates/main Translation-en [436 kB]
Get:8 http:// us-west-2.ec2.archive.ubuntu.com trusty-updates/universe Translation-en [198 kB]
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty/main Sources
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty/universe Sources
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty/main amd64 Packages
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty/universe amd64 Packages
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty/main Translation-en
Hit http:// us-west-2.ec2.archive.ubuntu.com trusty/universe Translation-en
Ign http:// us-west-2.ec2.archive.ubuntu.com trusty/main Translation-en_US
Ign http:// us-west-2.ec2.archive.ubuntu.com trusty/universe Translation-en_US
Get:9 http:// security.ubuntu.com trusty-security/main Sources [120 kB]
Get:10 http:// security.ubuntu.com trusty-security/universe Sources [42.5 kB]
Get:11 http:// security.ubuntu.com trusty-security/main amd64 Packages [531 kB]
Get:12 http:// security.ubuntu.com trusty-security/universe amd64 Packages [137 kB]
Get:13 http:// security.ubuntu.com trusty-security/main Translation-en [293 kB]
Get:14 http:// security.ubuntu.com trusty-security/universe Translation-en [82.1 kB]
Fetched 3,794 kB in 6s (582 kB/s)
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
dialog is already the newest version.
gcc is already the newest version.
python is already the newest version.
python-dev is already the newest version.
ca-certificates is already the newest version.
libffi-dev is already the newest version.
python-virtualenv is already the newest version.
The following extra packages will be installed:
libssl1.0.0
Suggested packages:
augeas-doc augeas-tools
Recommended packages:
libssl-doc
The following packages will be upgraded:
augeas-lenses libaugeas0 libssl-dev libssl1.0.0
> debconf: unable to initialize frontend: Dialog
> debconf: (TERM is not set, so the dialog frontend is not usable.)
> debconf: falling back to frontend: Readline
> debconf: unable to initialize frontend: Readline
> debconf: (This frontend requires a controlling tty.)
> debconf: falling back to frontend: Teletype
> dpkg-preconfigure: unable to re-open stdin:
4 upgraded, 0 newly installed, 0 to remove and 111 not upgraded.
Need to get 0 B/2,268 kB of archives.
After this operation, 7,168 B of additional disk space will be used.
> dpkg: warning: 'ldconfig' not found in PATH or not executable
> dpkg: warning: 'start-stop-daemon' not found in PATH or not executable
> dpkg: error: 2 expected programs not found in PATH or not executable
> Note: root's PATH should usually contain /usr/local/sbin, /usr/sbin and /sbin
E: Sub-process /usr/bin/dpkg returned an error code (2)
Wed Sep 28 00:00:13 UTC 2016 Automated renewal process failed. Exiting...
But when I manually run the command in /etc/cron
sudo /home/someuser/letsencrypt/letsencrypt-renew.sh domain-name1
The output is successful:
Wed Sep 28 03:20:00 UTC 2016 Certificate expires in 17 days.
Wed Sep 28 03:20:00 UTC 2016 Start renewal process...
Upgrading certbot-auto 0.7.0 to 0.8.1...
Replacing certbot-auto...
Creating virtual environment...
Installing Python packages...
Installation succeeded.
Processing /etc/letsencrypt/renewal/domainname1.conf
new certificate deployed without reload, fullchain is
/etc/letsencrypt/live/domainname1/fullchain.pem
Congratulations, all renewals succeeded. The following certs have been renewed:
/etc/letsencrypt/live/domainname1/fullchain.pem (success)
Wed Sep 28 03:21:30 UTC 2016