Does the amch.sh --renew-hook parameter support running Python scripts?

[suyanhj]

When issuing a certificate, the parameter --renew-hook 'cd scripts;python3 cert.py -e prod -n myconf' is specified in amch.sh. Is this supported? Can I run python scripts and pass parameters? I searched on Google but didn't find any relevant records. Even if there are any, they are using shell methods. Can anyone tell me? Thank you.

[jdevera]

AFAIK, all options that take commands can run anything, including python scripts. If you give more details about what you want to do and what problems you've found along the way, it's easier to help.

[suyanhj]

@jdevera
I used the following command to run it, but when it came to certificate renewal, the hook script didn't seem to execute and the certificate wasn't issued

export Ali_Key=
export Ali_Secret=

acme.sh --issue \
 --dns dns_ali \
 -d example.com \
 --server letsencrypt \
  --renew-hook "cd /opt/scripts/ ;python3 cert-update.py -e prod -n mg"

It should be noted that I am in a control node and issuing certificates for multiple cloud platforms, so I need to specify a separate key for each certificate (for every certificate issued, it is the key corresponding to the export). I am not sure if this affects the environment.
I don't know where to look at the renewal log, which makes it difficult for me to find the corresponding problem.

[jdevera]

I run mine in a docker container so I have not faced issues with log access.

I can drop some ideas to help debug, though:

• Check the stored config for acme.sh with acme.sh --info and for your domain with acme.sh --info -d domain.tld
• Is acme.sh running periodically at all? is it in the cron?
• If it is, then it's good to keep in mind the environment under which cronjobs run is very limited. Does your script depend on some tools being in the PATH? or some other pieces from your environment?
• Does your script require dependencies that may not be available in the environment where cron runs?
• You can add some logging to your script that writes to a file that you control so you know where to find it