Home / server / Questions / 932462
In Process
cclloyd
Asked: 2018-09-25 20:24:51 +0800 CST

Generate LetsEncrypt Certs to NFS share

  • 772

Im trying to generate a letsencrypt wildcard cert to use on various websites (one FQDN, multiple subdomains). The plan is to save those certs on a NFS share I have to easily access them on various webservers.

But when I mount my NFS share to /etc/letsencrypt so it saves the certs to there, I get an error:

letsencrypt | IOError: [Errno 37] No locks available

I set the mode of the folder on the share to 777, so it should have write access.

My docker-compose.yml file:

version: '3.5'
services:
  letsencrypt:
    image: linuxserver/letsencrypt
    restart: unless-stopped
    network_mode: host
    cap_add:
      - NET_ADMIN
    environment:
    - OTHERSTUFF=blahblah
    - STAGING=true
    volumes:
    - ./config/letsencrypt:/config/dns-conf
    - Certs:/config/etc/letsencrypt

volumes:
  Certs:
    name: certs
    driver: local
    driver_opts:
      type: nfs
      o: addr=10.0.1.14,rw
      device: ":/media/NAS/Certs"
ssl

1 Answers

  1. You may

    • Use another client that doesn't try to lock the file. On the letsencrypt website, there is a large number of clients listed.
    • Use your client to download the certificate to a local file system, then copy the certificate to the NFS share.
    • Try using the NFS mount option lock, although it should be on by default, or local_lock=all
    • 2