Raspberry Pi (2 and 3 not 1, Zero, or Zero W) compatible Docker base image with LetsEncrypt.
As you can see above this was forked from bcecchinato/certbot-rpi - I really appreciate all of bcecchinato's work but I ran into an issue one night where I desperately needed to update my certificate on my home automation Raspberry Pi. I ran my normal docker command pulling bcecchinato's image and boom - a bug with the version of certbot that was pulled in as a submodule. Well after a bit of hair pulling I decided to fork and update the project myself. Then I decided to update the .travis.yml to grab/update the certbot submodule on every build.
- Pro: this image will always have the latest certbot bug fixes.
- Con: This image could introduce bugs from certbot master.
Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. Let’s Encrypt is a service provided by the Internet Security Research Group (ISRG).
The key principles behind Let’s Encrypt are:
- Free: Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost.
- Automatic: Software running on a web server can interact with Let’s Encrypt to painlessly obtain a certificate, securely configure it for use, and automatically take care of renewal.
- Secure: Let’s Encrypt will serve as a platform for advancing TLS security best practices, both on the CA side and by helping site operators properly secure their servers.
- Transparent: All certificates issued or revoked will be publicly recorded and available for anyone to inspect.
- Open: The automatic issuance and renewal protocol will be published as an open standard that others can adopt.
- Cooperative: Much like the underlying Internet protocols themselves, Let’s Encrypt is a joint effort to benefit the community, beyond the control of any one organization.
Run all the commands from within the project root directory.
docker pull stevebargelt/certbot-rpi
To get a new certificate:
docker run -it --rm -p 443:443 --name certbot \
-v /etc/letsencrypt:/etc/letsencrypt \
stevebargelt/letsencrypt-rpi certonly --standalone \
-d your.domain.com
This is only a wrapper for the official client, built on a Raspberry Pi using Hypriot. The image is rebuilt every night.
The full details for the client commands are available on Certbot GitHub project.
LetsEncrypt-rpi is Open Source software released under the Apache 2.0 license.