diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-10-29 20:20:41 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2025-10-29 20:20:41 +0100 |
| commit | cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a (patch) | |
| tree | 0aedb33e690d9fa712304f18819136b362438ebc | |
| parent | 220209abde9646cf7b7fc4832e46b9b6c461c433 (diff) | |
| download | vyos-1x-cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a.tar.gz vyos-1x-cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a.zip | |
pki: T7953: systemd certbot.service must not use PrivateTmp
PrivateTmp needs to be disabled, otherwise we can not load the current
VyOS configuration to reconfigure the service automatically when certbot
runs.
| -rw-r--r-- | src/etc/systemd/system/certbot.service.d/10-override.conf | 3 | ||||
| -rwxr-xr-x | src/helpers/vyos-certbot-renew-pki.sh | 3 |
2 files changed, 3 insertions, 3 deletions
diff --git a/src/etc/systemd/system/certbot.service.d/10-override.conf b/src/etc/systemd/system/certbot.service.d/10-override.conf index 444a9b684..5c6d98b63 100644 --- a/src/etc/systemd/system/certbot.service.d/10-override.conf +++ b/src/etc/systemd/system/certbot.service.d/10-override.conf @@ -1,3 +1,6 @@ [Service] Group=vyattacfg +ExecStart= ExecStart=/usr/libexec/vyos/op_mode/pki.py renew_certbot +# Required for properly loading VyOS config +PrivateTmp=false diff --git a/src/helpers/vyos-certbot-renew-pki.sh b/src/helpers/vyos-certbot-renew-pki.sh deleted file mode 100755 index 1c273d2fa..000000000 --- a/src/helpers/vyos-certbot-renew-pki.sh +++ /dev/null @@ -1,3 +0,0 @@ -#!/bin/vbash -source /opt/vyatta/etc/functions/script-template -/usr/libexec/vyos/conf_mode/pki.py certbot_renew |