Debian 11 clean install script

Habe es getested.
Ich habe deine beiden Dateien in /etc/grommunio-admin-api/conf.d erstellt und grommunio-admin-api.service neu gestartet.

Sobald ich die /etc/polkit-1/localauthority/50-local.d/manage-units.pkla wieder rausnehme oder umbenenne und polkit.service restarte, kann ich die Services nicht mehr über das Admin Web UI starten/stoppen etc. Das finde ich auch logisch, weil durch die yaml Dateien ja nur konfiguriert wird, welche Dienste im Admin UI erscheinen, aber nichts an den Berechtigungen konfiguriert wird.

Ich hatte auch schon mit den yaml Dateien herumgespielt und damit weitere Services aufgenommen. Der Trick mit der 01... yaml zum Deaktivieren der "eingebauten" Services hat mir aber noch gefehlt, 1000 Dank!

Jetzt versuche ich noch, das Logging zu konfigurieren. Müssen die Logs immer in Dateien vorliegen oder kann man das auch auf journald "verbiegen"?
Weisst du, wie man in der oberen Icon-Leiste im Admin UI den Link für rspamd aktivert bekommt?

Also den Link auf rspam in der Admin UI kann man durch folgenden Eintrag in /etc/grommunio-admin-common/config.json setzen, das habe ich jetzt im Source nachvollzogen:
"rspamdWebAddress": "https://server-name:8443/antispam"

@mwilliams: Das fehlt noch in der Doku. Sämtliche anderen Links sind beschrieben, nur der Rspam fehlt (Manual Installation)

weini Wo im Source hast Du das gefunden, kannst Du den Link posten?

Hier sind die üblichen Verdächtigen aus der config.json:
https://github.com/grommunio/admin-web/blob/master/src/components/TopBar.js#L148

Hi everybody,
it is some time when I saw debian installatin script at last time. There are many changes. Good work guys.
I would like to install newer test server today so I refresh script and try to use it, but it does not work I spent some time with debuging. Installation menus are nice thing, but I do not like it because not seen what is happen below "motorhaube". At this time it was first trouble. Menus hide this message:

and installation necessary packages crashed. Script goes forward, but ....
Second problem I discovered is missing package wget at necessary package list. When is not installed in system setup_repo cannot download keyring and installation crash at second time at repository check.
When I repared that next message appears (again hidden by nice menu layout):

Package system-user-groweb is a virtual package provided by:
system-user-grommunio 3-1
grommunio-web 3.1.184. ...
You should explicitly select one to install.

E: Package system-user-groweb has no installation candidate

• Operation completed

I checked repo, system-user-groweb really not in. Both other packages are in repo, but when I remove system-user-groweb from packages list, apt has problem with dependences. So installation crash again.

Can someone tell me which packages are correct for installation? Rest of the script I did not test. I stucked here
Thank you very much for any help information.

P.S.
I do not realy say the menu layout is bad idea, I just would like to show when something unpredictable happen, it is not seen and for someone who cannot debug script could be confusing. Installation is finished, no errors was seen, but many packages are not installed and configured. And log in /var/log/ I discovered during script debuging too. May be better place will be in installation directory. But it is only my opinion.

ladas
Hello everyone,

the same behavior of the grommunio-web with me here. Last week I could still use the script.

Danke für die Arbeit der letzten Monate. :

the package system-user-groweb is obsolete and was removed. grommunio-web should contain the groweb user.

WalterH
Just tried to remove my system-user-groweb, but this would implicitly remove also grommunio-web.
I checked and there is no newer grommunio-web available, then the one I have installed.

weini I opened a ticket for this issue.

Thanks for the Reports. Maybe i get to look at it later.

ladas but I do not like it because not seen what is happen below "motorhaube".

I know exactly what you mean .
I was thinking of doing some work to be able to supply all necessary Options via getopts or smth alike but haven't gotten around to it .

ladas missing package wget at necessary package

I guess this was because most users are installing the "standard-utils".
Even my preseed-file has that in the "d-i pkgsel/include string" list so i haven't had the issue with my "minimal" setups

I forgot report other mistake in the script. After installation is missing directory /etc/grommunio-common/nginx/. After certificate generation at line 444 there is created file ssl_certificate.conf in this directory. As directory is missing, file is not created and at the end nginx not start. When I added line: mkdir -p /etc/grommunio-common/nginx/ before configuration file creation it start to work.

Just another question. In admin web gui dashboard is missing grommunio-antispam only in my test server installation. Everything works properly, just buttons Enable/Disable, Stop, Restart, Start not work. I get this message: Interactive authentication required. See system logs and 'systemctl status postfix.service' for details.
Is it possible to repare it somehow? Can someone help me where can I find more info? Thank you.

I wasn't able to do much yet but i guess i could at least push my ./common/repo

cb@asterix ~ghub/crpb/grommunio-setup-debian/common (git)-[getopts] % cat repo
#!/bin/bash
# SPDX-License-Identifier: AGPL-3.0-or-later
# SPDX-FileCopyrightText: 2021 grommunio GmbH

setup_repo() {
  local uri tmpkey kr
  uri='https://download.grommunio.com/RPM-GPG-KEY-grommunio'
  tmpkey=$(mktemp)
  echo
  echo -e " \x1b[36m▼\x1b[0m grommunio-setup is updating the system"
  echo
  mkdir -p /etc/apt/keyrings
  kr=/etc/apt/keyrings/download.grommunio.com.gpg
  if [ ! -f $kr ]; then
    /usr/lib/apt/apt-helper download-file "${uri}" "${tmpkey}"
    gpg --dearmor --output "${kr}" "${tmpkey}"
    rm "${tmpkey}"
  fi
cat << SOURCES > /etc/apt/sources.list.d/grommunio-community.sources
Types: deb
URIs: https://download.grommunio.com/community/Debian_11
Suites: Debian_11
Components: main
Signed-By: $kr
SOURCES

  apt-get update 2>&1 |tee -a "${LOGFILE}"
  apt-get install -y "${PACKAGES[@]}" 2>&1 |tee -a "${LOGFILE}"
  echo
  echo -e " \x1b[36m▼\x1b[0m operation completed"
  echo
  # keep visual output on the screen for a glimpse so admin can decide
  # if the logfile needs to be inspected.
  sleep 1
}

No wget or curl needed

ladas Everything works properly, just buttons Enable/Disable, Stop, Restart, Start not work. I get this message: Interactive authentication required. See system logs and 'systemctl status postfix.service' for details.
Is it possible to repare it somehow?

If i'm not misatken this would basically be possible with these changes..

weini [Allow users to manage services]
Identity=unix-user:grommunio
Action=org.freedesktop.systemd1.manage-units
ResultAny=yes

And:

WalterH Da gibt es vermutlich eine einfacher Lösung, 2 Dateien anlegen:
/etc/grommunio-admin-api/conf.d/01-services.yamlmit Inhalt

Haven't tried it myself yet tho but seems it works for @weini .

crpb Yes, correct for your commet on my posting. @WalterH suggestion did not work for me regarding the permissions.

rspam password for GUI login
I installed new clean machine now and used just a bit modified script. I inspected the rspam password creation and if I understand well the password should be the same like grommunio admin password. BUT this password not work for rspam GUI. Does someone know how to login in? Or should it be possible to log in? Thanks for any answer.

ladas
I am very sorry for panic. At worker file was two password lines, one with cpu error. After line removing ans services restart, login works with admin password.

crpb
Ich habe das jetzt mit Debian 12 Bookworm getestet und kann bestätigen, dass der Workaround über die /etc/polkit-1/localauthority/50-local.d/manage-units.pkla nicht mehr notwendig ist.
Die von Grommunio im Paket grommunio-admin-api bereitgestellte /usr/share/polkit-1/rules.d/10-grommunio.rules wird von der neueren Polkit Version von Debian 12 korrekt interprtiert.

Einziger Schöhnheitsfehler ist noch, dass dieser Datei der Service php-fpm.service aufgeführt wird. Unter Debian 12 muss das aber php8.2-fpm.service sein.