Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scl_source may not exist #7524

Open
bmw opened this issue Nov 6, 2019 · 9 comments · May be fixed by #7519

Comments

@bmw
Copy link
Member

@bmw bmw commented Nov 6, 2019

As described in the comments following https://community.letsencrypt.org/t/certbot-failing-to-find-python-version-on-centos-6-10/105634/5, it's possible that scl_source does not exist on RHEL 6 based systems. To reproduce this in the CentOS 6 Docker image, run:

yum install epel-release -y
yum install scl-utils-20120229 -y

You can enable the SCL repository and install rh-python36 after this and a newer version of scl-utils containing scl_source will not be installed.

I think we should fix this before rereleasing the code migrating people to Python 3.6 on SCL.

To do this, I think we can either try to make sure a new enough version of scl-utils is installed (although I'm not sure the best way to do that) or stop using scl_source and either manually modify our PATH or manually source /opt/rh/rh-python36/enable.

@bmw

This comment has been minimized.

Copy link
Member Author

@bmw bmw commented Nov 7, 2019

@bmw

This comment has been minimized.

Copy link
Member Author

@bmw bmw commented Nov 7, 2019

I talked with Elyscape about this Mattermost and they recommend changing the calls to scl_source to . /opt/rh/rh-python36/enable. See https://opensource.eff.org/eff-open-source/pl/rqxhh1dcap81dyuoxurgjz56iy.

I think I'm convinced that is the best approach.

@adferrand

This comment has been minimized.

Copy link
Contributor

@adferrand adferrand commented Nov 7, 2019

I talked with Elyscape about this Mattermost and they recommend changing the calls to scl_source to . /opt/rh/rh-python36/enable. See https://opensource.eff.org/eff-open-source/pl/rqxhh1dcap81dyuoxurgjz56iy.

I think I'm convinced that is the best approach.

I am too, it was my previous implementation of the enabling. If you remember, we moved to scl_source in case the path to the enabler script was not standard, since scl_source contains code to find it.

@bmw

This comment has been minimized.

Copy link
Member Author

@bmw bmw commented Nov 7, 2019

Yeah. Turns out it the path should be standard but the presence of scl_source is not :(

I think I'm in favor of including this change in #7519 just in case we have to revert the whole thing again to keep everything together, but I don't care too much.

@DimaVIII

This comment has been minimized.

Copy link

@DimaVIII DimaVIII commented Nov 7, 2019

As the update was pushed and it broke all live Certbot installation on CentOS 6, so Certbot is not able to startup on it self and load update any patches. This means I need to manual fix all my CentOS 6 server that are running Certbot?

@bmw

This comment has been minimized.

Copy link
Member Author

@bmw bmw commented Nov 7, 2019

@DimaVIII, if they upgraded during the few hour window where the buggy release was live unfortunately you do have to manually fix it. I wrote how to do this at https://community.letsencrypt.org/t/certbot-failing-to-find-python-version-on-centos-6-10/105634/3.

@DimaVIII

This comment has been minimized.

Copy link

@DimaVIII DimaVIII commented Nov 7, 2019

@bmw If I run certbot-auto after 'rm -rf /opt/eff.org/' it asks me for a lot of inputs, how can make it run without inputs? I need now to update few hundred servers. :/

@bmw

This comment has been minimized.

Copy link
Member Author

@bmw bmw commented Nov 7, 2019

If you're on CentOS 6 you can include --non-interactive on the command line.

@mnordhoff

This comment has been minimized.

Copy link
Contributor

@mnordhoff mnordhoff commented Nov 8, 2019

FWIW, on the forum, daTourist posted that they:

... solved it by updating scl-utils-* while excluding the EPEL repo:

yum --disablerepo=epel update scl-utils-*

@bmw bmw added the has pr label Nov 8, 2019
@bmw bmw modified the milestones: 1.0.0, 1.1.0 Nov 19, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
4 participants
You can’t perform that action at this time.