certbot-auto (previously known as letsencrypt-auto) is definitely a hack -- it allows people to run the client on typically older OSes that don&#x27;t have backported native packages.  It&#x27;s basically a tiny autoupdate and packaging system written in bash and python.  It uses airgapped signatures for updates, checks sha256 hashes for all of the python dependencies it&#x27;s installing, and puts them into a python virtual environment so that they don&#x27;t affect your OS.<p>If you don&#x27;t like wget; chmod, you can check a gpg signature too: <a href="https:&#x2F;&#x2F;certbot.eff.org&#x2F;docs&#x2F;intro.html#installation" rel="nofollow">https:&#x2F;&#x2F;certbot.eff.org&#x2F;docs&#x2F;intro.html#installation</a>