if [ "$QUIET" != 1 ]; then

echo "$@"

fi

args=""

# This `while` loop iterates over all parameters given to this function.

# For each parameter, all `'` will be replace by `'"'"'`, and the escaped string

# will be wrapped in a pair of `'`, then appended to `$args` string

# For example, `echo "It's only 1\$\!"` will be escaped to:

# 'echo' 'It'"'"'s only 1$!'

# │ │└┼┘│

# │ │ │ └── `'s only 1$!'` the literal string

# │ │ └── `\"'\"` is a single quote (as a string)

# │ └── `'It'`, to be concatenated with the strings following it

# └── `echo` wrapped in a pair of `'`, it's totally fine for the shell command itself

while [ $# -ne 0 ]; do

args="$args'$(printf "%s" "$1" | sed -e "s/'/'\"'\"'/g")' "

shift

done

su root -c "$args"

SUDO=""

if [ -n "${LE_AUTO_SUDO+x}" ]; then

case "$LE_AUTO_SUDO" in

SuSudo|su_sudo|su)

SUDO=SuSudo

;;

sudo)

SUDO="sudo -E"

;;

'')

# If we're not running with root, don't check that this script can only

# be modified by system users and groups.

NO_PERMISSIONS_CHECK=1

;;

*)

error "Error: unknown root authorization mechanism '$LE_AUTO_SUDO'."

exit 1

esac

say "Using preset root authorization mechanism '$LE_AUTO_SUDO'."

else

if test "`id -u`" -ne "0" ; then

if $EXISTS sudo 1>/dev/null 2>&1; then

SUDO="sudo -E"

else

say \"sudo\" is not available, will use \"su\" for installation steps...

SUDO=SuSudo

fi

fi

fi

# Arguments: Platform name, bootstrap function name

if [ "$DEBUG" = 1 ]; then

if [ "$2" != "" ]; then

BootstrapMessage $1

$2

fi

else

error "FATAL: $1 support is very experimental at present..."

error "if you would like to work on improving it, please ensure you have backups"

error "and then run this script again with the --debug flag!"

error "Alternatively, you can install OS dependencies yourself and run this script"

error "again with --no-bootstrap."

exit 1

fi

# Arguments: Platform name, bootstrap function name

if [ "$DEBUG" = 1 ]; then

if [ "$2" != "" ]; then

BootstrapMessage $1

$2

fi

else

error "WARNING: certbot-auto support for this $1 is DEPRECATED!"

error "Please visit certbot.eff.org to learn how to download a version of"

error "Certbot that is packaged for your system. While an existing version"

error "of certbot-auto may work currently, we have stopped supporting updating"

error "system packages for your system. Please switch to a packaged version"

error "as soon as possible."

exit 1

fi

# Arguments: "NOCRASH" if we shouldn't crash if we don't find a good python

#

# If no Python is found, PYVER is set to 0.

if [ "$USE_PYTHON_3" = 1 ]; then

MIN_PYVER=$MIN_PYVER3

MIN_PYTHON_VERSION=$MIN_PYTHON_3_VERSION

for LE_PYTHON in "$LE_PYTHON" python3; do

# Break (while keeping the LE_PYTHON value) if found.

$EXISTS "$LE_PYTHON" > /dev/null && break

done

else

MIN_PYVER=$MIN_PYVER2

MIN_PYTHON_VERSION=$MIN_PYTHON_2_VERSION

for LE_PYTHON in "$LE_PYTHON" python2.7 python27 python2 python; do

# Break (while keeping the LE_PYTHON value) if found.

$EXISTS "$LE_PYTHON" > /dev/null && break

done

fi

if [ "$?" != "0" ]; then

if [ "$1" != "NOCRASH" ]; then

error "Cannot find any Pythons; please install one!"

exit 1

else

PYVER=0

return 0

fi

fi

PYVER=$("$LE_PYTHON" -V 2>&1 | cut -d" " -f 2 | cut -d. -f1,2 | sed 's/\.//')

if [ "$PYVER" -lt "$MIN_PYVER" ]; then

if [ "$1" != "NOCRASH" ]; then

error "You have an ancient version of Python entombed in your operating system..."

error "This isn't going to work; you'll need at least version $MIN_PYTHON_VERSION."

exit 1

fi

fi

# Current version tested with:

#

# - Ubuntu

# - 14.04 (x64)

# - 15.04 (x64)

# - Debian

# - 7.9 "wheezy" (x64)

# - sid (2015-10-21) (x64)

# Past versions tested with:

#

# - Debian 8.0 "jessie" (x64)

# - Raspbian 7.8 (armhf)

# Believed not to work:

#

# - Debian 6.0.10 "squeeze" (x64)

if [ "$QUIET" = 1 ]; then

QUIET_FLAG='-qq'

fi

apt-get $QUIET_FLAG update || error apt-get update hit problems but continuing anyway...

# virtualenv binary can be found in different packages depending on

# distro version (#346)

virtualenv=

# virtual env is known to apt and is installable

if apt-cache show virtualenv > /dev/null 2>&1 ; then

if ! LC_ALL=C apt-cache --quiet=0 show virtualenv 2>&1 | grep -q 'No packages found'; then

virtualenv="virtualenv"

fi

fi

if apt-cache show python-virtualenv > /dev/null 2>&1; then

virtualenv="$virtualenv python-virtualenv"

fi

augeas_pkg="libaugeas0 augeas-lenses"

if [ "$ASSUME_YES" = 1 ]; then

YES_FLAG="-y"

fi

apt-get install $QUIET_FLAG $YES_FLAG --no-install-recommends \

python \

python-dev \

$virtualenv \

gcc \

$augeas_pkg \

libssl-dev \

openssl \

libffi-dev \

ca-certificates \

if ! $EXISTS virtualenv > /dev/null ; then

error Failed to install a working \"virtualenv\" command, exiting

exit 1

fi

if type dnf 2>/dev/null

then

TOOL=dnf

elif type yum 2>/dev/null

then

TOOL=yum

else

error "Neither yum nor dnf found. Aborting bootstrap!"

exit 1

fi

if [ "$ASSUME_YES" = 1 ]; then

YES_FLAG="-y"

fi

if [ "$QUIET" = 1 ]; then

QUIET_FLAG='--quiet'

fi

# Arguments: whitespace-delimited python packages to install

InitializeRPMCommonBase # This call is superfluous in practice

pkgs="

# Add the python packages

pkgs="$pkgs

if $TOOL list installed "httpd" >/dev/null 2>&1; then

pkgs="$pkgs

fi

if ! $TOOL install $YES_FLAG $QUIET_FLAG $pkgs; then

error "Could not install OS dependencies. Aborting bootstrap!"

exit 1

fi

# Tested with:

# - Fedora 20, 21, 22, 23 (x64)

# - Centos 7 (x64: on DigitalOcean droplet)

# - CentOS 7 Minimal install in a Hyper-V VM

# - CentOS 6

InitializeRPMCommonBase

# Most RPM distros use the "python" or "python-" naming convention. Let's try that first.

if $TOOL list python >/dev/null 2>&1; then

python_pkgs="$python

# Fedora 26 starts to use the prefix python2 for python2 based packages.

# this elseif is theoretically for any Fedora over version 26:

elif $TOOL list python2 >/dev/null 2>&1; then

python_pkgs="$python2

# Some distros and older versions of current distros use a "python27"

# instead of the "python" or "python-" naming convention.

else

python_pkgs="$python27

fi

BootstrapRpmCommonBase "$python_pkgs"

InitializeRPMCommonBase >/dev/null 2>&1;

if "${TOOL}" list rh-python36 >/dev/null 2>&1; then

return 0

fi

if "${TOOL}" list centos-release-scl >/dev/null 2>&1; then

return 0

fi

return 1

if "$EXISTS" python3.6 > /dev/null 2> /dev/null; then

return 0

fi

if [ ! -f /opt/rh/rh-python36/enable ]; then

return 0

fi

set +e

if ! . /opt/rh/rh-python36/enable; then

error 'Unable to enable rh-python36!'

exit 1

fi

set -e

# Tested with:

# - CentOS 6

InitializeRPMCommonBase

if ! "${TOOL}" list rh-python36 >/dev/null 2>&1; then

echo "To use Certbot on this operating system, packages from the SCL repository need to be installed."

if ! "${TOOL}" list centos-release-scl >/dev/null 2>&1; then

error "Enable the SCL repository and try running Certbot again."

exit 1

fi

if [ "${ASSUME_YES}" = 1 ]; then

/bin/echo -n "Enabling the SCL repository in 3 seconds... (Press Ctrl-C to cancel)"

sleep 1s

/bin/echo -ne "\e[0K\rEnabling the SCL repository in 2 seconds... (Press Ctrl-C to cancel)"

sleep 1s

/bin/echo -e "\e[0K\rEnabling the SCL repository in 1 second... (Press Ctrl-C to cancel)"

sleep 1s

fi

if ! "${TOOL}" install "${YES_FLAG}" "${QUIET_FLAG}" centos-release-scl; then

error "Could not enable SCL. Aborting bootstrap!"

exit 1

fi

fi

# CentOS 6 must use rh-python36 from SCL

if "${TOOL}" list rh-python36 >/dev/null 2>&1; then

python_pkgs="rh-python36-python

else

error "No supported Python package available to install. Aborting bootstrap!"

exit 1

fi

BootstrapRpmCommonBase "${python_pkgs}"

# Enable SCL rh-python36 after bootstrapping.

EnablePython36SCL

# Tested with:

# - Fedora 29

InitializeRPMCommonBase

# Fedora 29 must use python3-virtualenv

if $TOOL list python3-virtualenv >/dev/null 2>&1; then

python_pkgs="python3

else

error "No supported Python package available to install. Aborting bootstrap!"

exit 1

fi

BootstrapRpmCommonBase "$python_pkgs"

# SLE12 don't have python-virtualenv

if [ "$ASSUME_YES" = 1 ]; then

zypper_flags="-nq"

install_flags="-l"

fi

if [ "$QUIET" = 1 ]; then

QUIET_FLAG='-qq'

fi

if zypper search -x python-virtualenv >/dev/null 2>&1; then

OPENSUSE_VIRTUALENV_PACKAGES="python-virtualenv"

else

# Since Leap 15.0 (and associated Tumbleweed version), python-virtualenv

# is a source package, and python2-virtualenv must be used instead.

# Also currently python2-setuptools is not a dependency of python2-virtualenv,

# while it should be. Installing it explicitly until upstream fix.

OPENSUSE_VIRTUALENV_PACKAGES="python2-virtualenv python2-setuptools"

fi

zypper $QUIET_FLAG $zypper_flags in $install_flags \

python \

python-devel \

$OPENSUSE_VIRTUALENV_PACKAGES \

gcc \

augeas-lenses \

libopenssl-devel \

libffi-devel \

ca-certificates

# Tested with:

# - ArchLinux (x86_64)

#

# "python-virtualenv" is Python3, but "python2-virtualenv" provides

# only "virtualenv2" binary, not "virtualenv".

deps="

# pacman -T exits with 127 if there are missing dependencies

missing=$(pacman -T $deps) || true

if [ "$ASSUME_YES" = 1 ]; then

noconfirm="--noconfirm"

fi

if [ "$missing" ]; then

if [ "$QUIET" = 1 ]; then

pacman -S --needed $missing $noconfirm > /dev/null

else

pacman -S --needed $missing $noconfirm

fi

fi

PACKAGES="

ASK_OPTION="--ask"

if [ "$ASSUME_YES" = 1 ]; then

ASK_OPTION=""

fi

case "$PACKAGE_MANAGER" in

(paludis)

cave resolve --preserve-world --keep-targets if-possible $PACKAGES -x

;;

(pkgcore)

pmerge --noreplace --oneshot $ASK_OPTION $PACKAGES

;;

(portage|*)

emerge --noreplace --oneshot $ASK_OPTION $PACKAGES

;;

esac

if [ "$QUIET" = 1 ]; then

QUIET_FLAG="--quiet"

fi

pkg install -Ay $QUIET_FLAG \

python \

py27-virtualenv \

augeas \

libffi

if hash brew 2>/dev/null; then

say "Using Homebrew to install dependencies..."

pkgman=brew

pkgcmd="brew install"

elif hash port 2>/dev/null; then

say "Using MacPorts to install dependencies..."

pkgman=port

pkgcmd="port install"

else

say "No Homebrew/MacPorts; installing Homebrew..."

ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

pkgman=brew

pkgcmd="brew install"

fi

$pkgcmd augeas

if [ "$(which python)" = "/System/Library/Frameworks/Python.framework/Versions/2.7/bin/python" \

-o "$(which python)" = "/usr/bin/python" ]; then

# We want to avoid using the system Python because it requires root to use pip.

# python.org, MacPorts or HomeBrew Python installations should all be OK.

say "Installing python..."

$pkgcmd python

fi

# Workaround for _dlopen not finding augeas on macOS

if [ "$pkgman" = "port" ] && ! [ -e "/usr/local/lib/libaugeas.dylib" ] && [ -e "/opt/local/lib/libaugeas.dylib" ]; then

say "Applying augeas workaround"

mkdir -p /usr/local/lib/

ln -s /opt/local/lib/libaugeas.dylib /usr/local/lib/

fi

if ! hash pip 2>/dev/null; then

say "pip not installed"

say "Installing pip..."

curl --silent --show-error --retry 5 https://bootstrap.pypa.io/get-pip.py | python

fi

if ! hash virtualenv 2>/dev/null; then

say "virtualenv not installed."

say "Installing with pip..."

pip install virtualenv

fi

if [ "$QUIET" = 1 ]; then

QUIET_FLAG='--quiet'

fi

if ! urpmi --force $QUIET_FLAG \

python \

libpython-devel \

python-virtualenv

then

error "Could not install Python dependencies. Aborting bootstrap!"

exit 1

fi

if ! urpmi --force $QUIET_FLAG \

git \

gcc \

python-augeas \

libopenssl-devel \

libffi-devel \

rootcerts

then

error "Could not install additional dependencies. Aborting bootstrap!"

exit 1

fi

if [ -f $BOOTSTRAP_VERSION_PATH ]; then

PREV_BOOTSTRAP_VERSION=$(cat "$BOOTSTRAP_VERSION_PATH")

# The list below only contains bootstrap version strings that existed before

# we started writing them to disk.

#

# DO NOT MODIFY THIS LIST UNLESS YOU KNOW WHAT YOU'RE DOING!

elif grep -Fqx "$BOOTSTRAP_VERSION" << "UNLIKELY_EOF"

then

# If there's no bootstrap version saved to disk, but the currently selected

# bootstrap script is from before we started saving the version number,

# return the currently selected version to prevent us from rebootstrapping

# unnecessarily.

PREV_BOOTSTRAP_VERSION="$BOOTSTRAP_VERSION"

fi

"$1" - "$2" "$3" << "UNLIKELY_EOF"

"$1" - "$2" "$3" "$4" << "UNLIKELY_EOF"