From cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Wed, 29 Oct 2025 20:20:41 +0100 Subject: pki: T7953: systemd certbot.service must not use PrivateTmp PrivateTmp needs to be disabled, otherwise we can not load the current VyOS configuration to reconfigure the service automatically when certbot runs. --- src/etc/systemd/system/certbot.service.d/10-override.conf | 3 +++ src/helpers/vyos-certbot-renew-pki.sh | 3 --- 2 files changed, 3 insertions(+), 3 deletions(-) delete mode 100755 src/helpers/vyos-certbot-renew-pki.sh diff --git a/src/etc/systemd/system/certbot.service.d/10-override.conf b/src/etc/systemd/system/certbot.service.d/10-override.conf index 444a9b684..5c6d98b63 100644 --- a/src/etc/systemd/system/certbot.service.d/10-override.conf +++ b/src/etc/systemd/system/certbot.service.d/10-override.conf @@ -1,3 +1,6 @@ [Service] Group=vyattacfg +ExecStart= ExecStart=/usr/libexec/vyos/op_mode/pki.py renew_certbot +# Required for properly loading VyOS config +PrivateTmp=false diff --git a/src/helpers/vyos-certbot-renew-pki.sh b/src/helpers/vyos-certbot-renew-pki.sh deleted file mode 100755 index 1c273d2fa..000000000 --- a/src/helpers/vyos-certbot-renew-pki.sh +++ /dev/null @@ -1,3 +0,0 @@ -#!/bin/vbash -source /opt/vyatta/etc/functions/script-template -/usr/libexec/vyos/conf_mode/pki.py certbot_renew -- cgit v1.2.3