Hacker News new | ask | show | jobs
by pmontra 1082 days ago
I switched to Debian 11 for the same reasons around Christmas. I also found out faster than Ubuntu 20.04 and the fan starts spinning less often. I've been on Ubuntu since 8.04.

When I can I'm creating servers with Debian too, personal ones and for customers. The only problem there is that Letsencrypt uses a snap to update the certificates, even on Debian [1]. Not all my servers need a web server but when they do I usually use ngnix. I'm investigating alternative update clients with no hurry. When that is solved, goodbye to Ubuntu.

[1] https://certbot.eff.org/instructions?ws=nginx&os=debianbuste...

4 comments

certbot is available in classic apt repositories in Debian and Ubuntu. No need to install it from snap.

https://repology.org/project/certbot/versions

Haven't checked, but looking at version parity between these 2 I think both have the same maintaining team for Let's Encrypt.
If you pick "pip" instead of a specific Linux distro it gives you instructions without a snap.
I'm afraid that this is only a wrapper around the snap. I quote from that page

> If you have any Certbot packages installed using an OS package manager like apt, dnf, or yum, you should remove them before installing the Certbot snap to ensure that when you run the command certbot the snap is used rather than the installation from your OS package manager.

That seems to be a doc issue. It certainly did not install a snap when I just tested this, and the certpot python package it installs explicitly checks to see whether it is running in a snap or not, which would make no sense if running it outside wasn't an option.
That doesn't mean the other means wrap snap. It just means in order to truly install via snap, you should remove the same package installed via other means before
I like acme.sh
I switched to dehydrated after LetsEncrypt snapped their client.