Your message dated Sun, 16 Apr 2023 05:48:59 +0000
with message-id <[email protected]>
and subject line Bug#1034003: fixed in python-certbot 2.1.0-4
has caused the Debian Bug report #1034003,
regarding certbot: Implement --no-random-sleep-on-renew on systemd timer
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1034003: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034003
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: certbot
Version: 1.12.0-2
Severity: wishlist
Tags: patch
Dear Maintainer,
Upstream implemented a flag `--no-random-sleep-on-renew` for the use of
packagers - see https://github.com/certbot/certbot/issues/6596
The current behaviour leaves the systemd service 'activating' for more
5+ mins while the random sleep is taking place. We monitor for this
state because its often a sign of failure of services.
It's not necessary for this due to the RandomizedDelaySec in the systemd
timer itself.
It would be good to implement this option so that the service doesn't
get stuck activating for a long period of time and so i've attached a
patch.
thanks,
Dan
-- System Information:
Debian Release: 11.6
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-21-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages certbot depends on:
ii debconf [debconf-2.0] 1.5.77
ii python3 3.9.2-3
ii python3-certbot 1.12.0-2
certbot recommends no packages.
Versions of packages certbot suggests:
pn python-certbot-doc <none>
pn python3-certbot-apache <none>
pn python3-certbot-nginx <none>
-- debconf information excluded
>From 7be2e1fff7a48bdf6647259f37a09218c24c90bc Mon Sep 17 00:00:00 2001
From: Dan Poltawski <[email protected]>
Date: Thu, 6 Apr 2023 10:30:30 +0100
Subject: [PATCH 1/1] systemd: prevent randomised timer in certbot renew
This is already being handled by RandomizedDelaySec in the timer
---
debian/certbot.service | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/debian/certbot.service b/debian/certbot.service
index d5e13f2..bd4f95b 100644
--- a/debian/certbot.service
+++ b/debian/certbot.service
@@ -4,5 +4,5 @@
Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html
Documentation=https://certbot.eff.org/docs
[Service]
Type=oneshot
-ExecStart=/usr/bin/certbot -q renew
+ExecStart=/usr/bin/certbot -q renew --no-random-sleep-on-renew
PrivateTmp=true
--
2.39.2
--- End Message ---
--- Begin Message ---
Source: python-certbot
Source-Version: 2.1.0-4
Done: Harlan Lieberman-Berg <[email protected]>
We believe that the bug you reported is fixed in the latest version of
python-certbot, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Harlan Lieberman-Berg <[email protected]> (supplier of updated
python-certbot package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 16 Apr 2023 01:22:29 -0400
Source: python-certbot
Architecture: source
Version: 2.1.0-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Let's Encrypt <[email protected]>
Changed-By: Harlan Lieberman-Berg <[email protected]>
Closes: 1024710 1033445 1034003
Changes:
python-certbot (2.1.0-4) unstable; urgency=medium
.
* Skip upstream sleep, since we do our own (Closes: #1034003)
* Add Italian debconf translation (Closes: #1024710)
* Add Romanian debconf translation (Closes: #1033445)
Checksums-Sha1:
74bfbda53b77569914e848deebf2f4769c58d30b 3058 python-certbot_2.1.0-4.dsc
b3932f99061f485cafa5175af778d57c25a2a9e8 33128
python-certbot_2.1.0-4.debian.tar.xz
488f0aa5e089f4685b1fa079fe818df53ef7a2ec 8050
python-certbot_2.1.0-4_source.buildinfo
Checksums-Sha256:
5a3f4f6580a1ee7dc3fc071f634dc543063f9593c81b053137f67ac90a8f4d18 3058
python-certbot_2.1.0-4.dsc
c45faf4ebb7361e230e04f2b3b789d47fdfe5f7f55c0653c74a8085ea3c25ce9 33128
python-certbot_2.1.0-4.debian.tar.xz
684270fbec6ef0e7a3ff5ee9b5d1d0d1030ae201a9f09c88ac34a57009fcddb0 8050
python-certbot_2.1.0-4_source.buildinfo
Files:
2e7f4141d37a05fd4a3fe74c2f9e9ea8 3058 python optional
python-certbot_2.1.0-4.dsc
48ef0b7b7d78552827199ab1d19b1f0c 33128 python optional
python-certbot_2.1.0-4.debian.tar.xz
fb10e53c0dc5b1f06650d68a751c325e 8050 python optional
python-certbot_2.1.0-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=jnqT
-----END PGP SIGNATURE-----
--- End Message ---
