From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E093C1582EF for ; Fri, 07 Mar 2025 21:10:39 +0000 (UTC) Received: from lists.gentoo.org (bobolink.gentoo.org [140.211.166.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) (Authenticated sender: relay-lists.gentoo.org@gentoo.org) by smtp.gentoo.org (Postfix) with ESMTPSA id D0A52343014 for ; Fri, 07 Mar 2025 21:10:39 +0000 (UTC) Received: from bobolink.gentoo.org (localhost [127.0.0.1]) by bobolink.gentoo.org (Postfix) with ESMTP id 65A6F1103E1; Fri, 07 Mar 2025 21:09:56 +0000 (UTC) Received: from cyborg.thican.net (cyborg.thican.net [IPv6:2001:41d0:2:2e67::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bobolink.gentoo.org (Postfix) with ESMTPS id 8244F11027C for ; Fri, 07 Mar 2025 21:09:55 +0000 (UTC) Received: by cyborg.thican.net (Postfix, from userid 1000) id 8C7DB81202F; Fri, 07 Mar 2025 22:09:53 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=thican.net; s=cyborg; t=1741381793; bh=D4uN3ZXzmbXRbuJcZgjn8E185Lra0N1XsBMYxn33PN4=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=TeHi6Q0X8eiX0kmvC1CZgDYCHNDeqmAwfuABo0OVNakmpgPB+8QUVdUBLz+q/fHpI 8v5aCptdX/BzNFcwSzN0XaMalI374XRsY2C9M0JZ8ob83AU726a1A3IkH+fvRmhg/r wggvAqP5QqnnOwBcUlZZu8WNWerF3APh922aGSScWVfEA09ZgQ5EcOZGztHky/GTFJ zuveoUmTs2xqd4GaubKGaNGW4ElrO5TZSgpZOBP6OJ0t0FIuxDbHSIG6NdYFa/74M1 XjKEJ2CH+w7Sv3Rl0z7tuIRxjxarudTIVEFeS1Dxc5EgjJn0bDH2E7pB0VGkYeER0+ qDEUKCOy+CszQ== Date: Fri, 7 Mar 2025 22:09:53 +0100 From: Thibaud CANALE To: gentoo-dev@lists.gentoo.org Cc: pr@gentoo.org Subject: [gentoo-dev] [RFC][V2] News Item: Certbot rework and transition Message-ID: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="fnmr3hzcsig2m6xm" Content-Disposition: inline In-Reply-To: X-Archives-Salt: bb23bcd8-2573-4b8b-af72-dafab5350403 X-Archives-Hash: f1a810e40c34c89260c6f36c5742c246 --fnmr3hzcsig2m6xm Content-Type: text/plain; protected-headers=v1; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Subject: [gentoo-dev] [RFC][V2] News Item: Certbot rework and transition MIME-Version: 1.0 Second iteration of news item about Certbot rework. Thanks Duncan for the feedbacks. And I arbitrary decided for a date about the removal of transition metapackages, unless it is not satisfying. Note: I am not sure if I had to update the "Posted" field, did it anyway. =3D=3D=3D=3D=3D=3D=3D=3D 2025-03-04-certbot-rework.en.txt BEGIN =3D=3D=3D= =3D=3D=3D=3D=3D Title: Certbot rework and transition Author: Thibaud CANALE Content-Type: text/plain Posted: 2025-03-07 Revision: 2 News-Item-Format: 2.0 Display-If-Installed: app-crypt/acme, app-crypt/certbot, app-crypt/certbot-= apache, app-crypt/certbot-dns-cloudflare, app-crypt/certbot-dns-desec, app-= crypt/certbot-dns-dnsimple, app-crypt/certbot-dns-nsone, app-crypt/certbot-= dns-rfc2136, app-crypt/certbot-nginx Certbot and its modules have been reworked into a single package; this should ease maintenance and make delivery faster and more reliable. Starting from app-crypt/certbot-3.2.0-r100, only this package is necessary to install Certbot and its modules thanks to the help of USE flags. Some block statements are enforced for modules packages to avoid collisions. However actions from users are required: @world set and package.use changes. Temporary transition metapackages call for the appropriate USE flags, but users still have to change their package.use and later they must update their @world set to complete the transition before 2025-06-10 (around three months from publication), after which these temporary transition packages will be removed. As a reminder, there is a Wiki page for Certbot: https://wiki.gentoo.org/wiki/Let%27s_Encrypt Step by step: 1. In /etc/portage/package.use: Add an entry for the modules of your choice based on the USE flags of the new unified package. Example: app-crypt/certbot certbot-apache certbot-dns-rfc2136 If you wish to stick with stable you may stop here. The below steps (skipping step 2) will be completed later once the unified package stabilizes. Should you wish to complete the transition now: 2. In /etc/portage/package.accept_keywords: (skip this step and continue with step 3 if completing after the unified package stabilizes): Add a keyword entry for the new unified package. Example: ~app-crypt/certbot-3.2.0 ~amd64 3. Clean the old module packages out of your @world or other sets: emerge --ask --deselect app-crypt/acme app-crypt/certbot-apache \ app-crypt/certbot-dns-cloudflare app-crypt/certbot-dns-desec \ app-crypt/certbot-dns-dnsimple app-crypt/certbot-dns-nsone \ app-crypt/certbot-dns-rfc2136 app-crypt/certbot-nginx 4. Emerge or update app-crypt/certbot if necessary. This should remove previous packages: emerge --verbose --ask --changed-use --noreplace app-crypt/certbot =3D=3D=3D=3D=3D=3D=3D=3D 2025-03-04-certbot-rework.en.txt END =3D=3D=3D=3D= =3D=3D=3D=3D --=20 Thibaud CANALE thican [at] thican [dot] net https://thican.net/ GPG: rsa4096 2013-10-14 485EF628CB85CDD4CB7CFF0D52F5127650733A18 --fnmr3hzcsig2m6xm Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESF72KMuFzdTLfP8NUvUSdlBzOhgFAmfLYJwACgkQUvUSdlBz OhjM+g//c5FOw6Iksw5JE0MutoOY7reHzdfc6YmnFmElynjZW/B0FdowzHxeoEUr HNr5cYTmDtjPPhcbTWzinOy/aPqDLseahj+gfStkwApHVolBSfgqUUDXPpBOGHF5 k9ckPxCbW0eTJYvVA35QvrT+NDuGppS2UBLo4nkh2uPJZRDRaM5jUJoJxUpx97ah teH6AXcjeWu85ywu+ygcOhZ979y3RfoAMwIgkBjqmisR+0WII1RZR6SOnXBfc33F MdMSqZ1Fr5/zmFL5ec+x8jRZ7hK99c0l7v2epGEbuJA+8ToohpCgTkNEDPeC7IvS 1aQ/kQEdWqPFoICkHsc+cBNdj/UMx+/KUNKT6Cbvo/BxftZ4pUoFO5h+sbRyRceP Fg3y44kxNYcyqa4+ZoeCvqfM04vOvsIAvzsus0Dyc3MzFwkZJkedBR4tCYr2em83 2Xce2N4dMphGyGBgp6jtJh2CsqCiiKyfpxeILtGBesCGCT6Y03SNAckrw86bv7zx MIRKOntV6MNJycYByQ5W1ukzQmLKsImas1DvY7AjpmC6Q3eiBbjQEgfkFZXV47GT mIImqku1a2p0gemproI8PgPZLa/CXCborgPzKlN+Jl16JfbRYzxQhLjtzi/IvYoY Rac40l9D0URi4qJbhOgxV/GQFOGqyA6abTF2c3HC4cu7uxeY6Y4= =5obx -----END PGP SIGNATURE----- --fnmr3hzcsig2m6xm--