[Letsencrypt-devel] Bug#856698: certbot: Uses extreme amount of RAM

[John Goerzen]

Package: certbot
Version: 0.9.3-1~bpo8+2
Severity: grave
Justification: renders package unusable

I've had a lot of trouble with certbot requiring GBs of RAM to run.  

It triggers OOM:

[882971.166635] Out of memory: Kill process 23431 (certbot) score 534 or
sacrifice child
[882971.166976] Killed process 23431 (certbot) total-vm:2298580kB,
anon-rss:2250352kB, file-rss:752kB

I found it pushing 8GB recently.  I can't think of anything odd on this
system other than that it has about two dozen hostnames that are SANs on
the certs generated.

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (500, 'oldstable')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 3.16.0-4-amd64 (SMP w/3 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages certbot depends on:
ii  dialog               1.2-20140911-1
ii  init-system-helpers  1.22
ii  python               2.7.9-1
ii  python-certbot       0.9.3-1~bpo8+2
pn  python:any           <none>

certbot recommends no packages.

Versions of packages certbot suggests:
ii  python-certbot-apache  0.9.3-1~bpo8+1
ii  python-certbot-doc     0.9.3-1~bpo8+2

-- Configuration Files:
/etc/cron.d/certbot changed [not included]

-- no debconf information