Debian 11 clean install script

weini Wo im Source hast Du das gefunden, kannst Du den Link posten?

Hier sind die üblichen Verdächtigen aus der config.json:
https://github.com/grommunio/admin-web/blob/master/src/components/TopBar.js#L148

Hi everybody,
it is some time when I saw debian installatin script at last time. There are many changes. Good work guys.
I would like to install newer test server today so I refresh script and try to use it, but it does not work I spent some time with debuging. Installation menus are nice thing, but I do not like it because not seen what is happen below "motorhaube". At this time it was first trouble. Menus hide this message:

and installation necessary packages crashed. Script goes forward, but ....
Second problem I discovered is missing package wget at necessary package list. When is not installed in system setup_repo cannot download keyring and installation crash at second time at repository check.
When I repared that next message appears (again hidden by nice menu layout):

Package system-user-groweb is a virtual package provided by:
system-user-grommunio 3-1
grommunio-web 3.1.184. ...
You should explicitly select one to install.

E: Package system-user-groweb has no installation candidate

• Operation completed

I checked repo, system-user-groweb really not in. Both other packages are in repo, but when I remove system-user-groweb from packages list, apt has problem with dependences. So installation crash again.

Can someone tell me which packages are correct for installation? Rest of the script I did not test. I stucked here
Thank you very much for any help information.

P.S.
I do not realy say the menu layout is bad idea, I just would like to show when something unpredictable happen, it is not seen and for someone who cannot debug script could be confusing. Installation is finished, no errors was seen, but many packages are not installed and configured. And log in /var/log/ I discovered during script debuging too. May be better place will be in installation directory. But it is only my opinion.

ladas
Hello everyone,

the same behavior of the grommunio-web with me here. Last week I could still use the script.

Danke für die Arbeit der letzten Monate. :

the package system-user-groweb is obsolete and was removed. grommunio-web should contain the groweb user.

WalterH
Just tried to remove my system-user-groweb, but this would implicitly remove also grommunio-web.
I checked and there is no newer grommunio-web available, then the one I have installed.

weini I opened a ticket for this issue.

Thanks for the Reports. Maybe i get to look at it later.

ladas but I do not like it because not seen what is happen below "motorhaube".

I know exactly what you mean .
I was thinking of doing some work to be able to supply all necessary Options via getopts or smth alike but haven't gotten around to it .

ladas missing package wget at necessary package

I guess this was because most users are installing the "standard-utils".
Even my preseed-file has that in the "d-i pkgsel/include string" list so i haven't had the issue with my "minimal" setups

crpb
There are more possibilities, how to do it I liked the version with varibles at the beggining of the script. It was clear and easy.
But other good way could be read all necessary variables by dialog windows at the beginning and after that run installation in visible mode.

About wget: I use for my servers debian minimal install (cca 0.8 GB). There is not even man in it All I need I install for actual purpose. It is not so much work and system is light and clear.

I forgot report other mistake in the script. After installation is missing directory /etc/grommunio-common/nginx/. After certificate generation at line 444 there is created file ssl_certificate.conf in this directory. As directory is missing, file is not created and at the end nginx not start. When I added line: mkdir -p /etc/grommunio-common/nginx/ before configuration file creation it start to work.

I wasn't able to do much yet but i guess i could at least push my ./common/repo

cb@asterix ~ghub/crpb/grommunio-setup-debian/common (git)-[getopts] % cat repo
#!/bin/bash
# SPDX-License-Identifier: AGPL-3.0-or-later
# SPDX-FileCopyrightText: 2021 grommunio GmbH

setup_repo() {
  local uri tmpkey kr
  uri='https://download.grommunio.com/RPM-GPG-KEY-grommunio'
  tmpkey=$(mktemp)
  echo
  echo -e " \x1b[36m▼\x1b[0m grommunio-setup is updating the system"
  echo
  mkdir -p /etc/apt/keyrings
  kr=/etc/apt/keyrings/download.grommunio.com.gpg
  if [ ! -f $kr ]; then
    /usr/lib/apt/apt-helper download-file "${uri}" "${tmpkey}"
    gpg --dearmor --output "${kr}" "${tmpkey}"
    rm "${tmpkey}"
  fi
cat << SOURCES > /etc/apt/sources.list.d/grommunio-community.sources
Types: deb
URIs: https://download.grommunio.com/community/Debian_11
Suites: Debian_11
Components: main
Signed-By: $kr
SOURCES

  apt-get update 2>&1 |tee -a "${LOGFILE}"
  apt-get install -y "${PACKAGES[@]}" 2>&1 |tee -a "${LOGFILE}"
  echo
  echo -e " \x1b[36m▼\x1b[0m operation completed"
  echo
  # keep visual output on the screen for a glimpse so admin can decide
  # if the logfile needs to be inspected.
  sleep 1
}

No wget or curl needed

ladas Everything works properly, just buttons Enable/Disable, Stop, Restart, Start not work. I get this message: Interactive authentication required. See system logs and 'systemctl status postfix.service' for details.
Is it possible to repare it somehow?

If i'm not misatken this would basically be possible with these changes..

weini [Allow users to manage services]
Identity=unix-user:grommunio
Action=org.freedesktop.systemd1.manage-units
ResultAny=yes

And:

WalterH Da gibt es vermutlich eine einfacher Lösung, 2 Dateien anlegen:
/etc/grommunio-admin-api/conf.d/01-services.yamlmit Inhalt

Haven't tried it myself yet tho but seems it works for @weini .

crpb Yes, correct for your commet on my posting. @WalterH suggestion did not work for me regarding the permissions.

rspam password for GUI login
I installed new clean machine now and used just a bit modified script. I inspected the rspam password creation and if I understand well the password should be the same like grommunio admin password. BUT this password not work for rspam GUI. Does someone know how to login in? Or should it be possible to log in? Thanks for any answer.

ladas
I am very sorry for panic. At worker file was two password lines, one with cpu error. After line removing ans services restart, login works with admin password.

crpb
Ich habe das jetzt mit Debian 12 Bookworm getestet und kann bestätigen, dass der Workaround über die /etc/polkit-1/localauthority/50-local.d/manage-units.pkla nicht mehr notwendig ist.
Die von Grommunio im Paket grommunio-admin-api bereitgestellte /usr/share/polkit-1/rules.d/10-grommunio.rules wird von der neueren Polkit Version von Debian 12 korrekt interprtiert.

Einziger Schöhnheitsfehler ist noch, dass dieser Datei der Service php-fpm.service aufgeführt wird. Unter Debian 12 muss das aber php8.2-fpm.service sein.

weini

Danke der Rückmeldung, wollte ich die tage auch endlich mal testen wenn ich dazu komme

The changes made to get this to install on Debian 12 appear to have broken it installing on Debian 11

It gets as far as letting you select use a local database and then says failed to connect to the database.

It still works with the one I forked before the changes
https://github.com/holl595/grommunio-setup