Zimbra 10 FOSS Installation Guide

[innotelinc]

Check your /etc/hosts file and /etc/resolv.conf to make sure there is a nameserver line ie

/etc/resolv.conf
nameserver 8.8.8.8

/etc/hosts
127.0.0.1 localhost.localdomain localhost
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
192.168.1.197 mail.innotel.us mail


This is the way it worked for me since I started this thread so I don't break what works. If you have other suggestions please advise. Also I wasn't aware of the build-no thing. Ill look into that thanks for your kind words, please let me know if I can help further.

[innotelinc]

Made a new 10.0.6, 10.1.7, & 10.1.8 versions tonight for Ubuntu 20.04 and 22.04

Ubuntu 20

Code: Select all

wget https://repo.innotel.us/zcs-10.0.6_GA_1270000.UBUNTU20_64.20250523043222.tgz

Code: Select all

wget https://repo.innotel.us/zcs-10.1.7_GA_1270000.UBUNTU20_64.20250523044456.tgz

Code: Select all

wget https://repo.innotel.us/zcs-10.1.8_GA_1270000.UBUNTU20_64.20250523040019.tgz

Ubuntu 22

Code: Select all

wget https://repo.innotel.us/zcs-10.0.6_GA_1270000.UBUNTU22_64.20250523011731.tgz

Code: Select all

wget https://repo.innotel.us/zcs-10.1.7_GA_1270000.UBUNTU22_64.20250523003806.tgz

Code: Select all

wget https://repo.innotel.us/zcs-10.1.8_GA_1270000.UBUNTU22_64.20250523001716.tgz

[adrian.gibanel.btactic]

Made a new 10.0.6, 10.1.7, & 10.1.8 versions tonight for Ubuntu 20.04 and 22.04

Ubuntu 20

Code: Select all

wget https://repo.innotel.us/zcs-10.1.8_GA_1270000.UBUNTU20_64.20250523040019.tgz

Ubuntu 22

Code: Select all

wget https://repo.innotel.us/zcs-10.1.8_GA_1270000.UBUNTU22_64.20250523001716.tgz

Regarding your 10.1.8 build can you confirm that you have not added anything on top of it to fix the Dos security issue as described in:
- ZCS NE 10.1.8 release notes - Security fixes page.
- FOSS - 10.1.8 missing security fix and other diffs thread.
- New patch - 10.1.8, 10.0.14 and 9.0.0 P45 post.
?

Thank you.

[innotelinc]

No, I have not added any security fixes or anything of the like. I just built it from the instructions and here it is. I make no warranties as I do not own the software, just a contributor to the community!

[Martinwiertz]

Hello,

Please help.
I have upgraded my FOSS install to 10.1.8. All went wel.
I want to use the Zextras Theme but get errors on install. Previously I used Zextra theme on FOSS 10.0.14.

Would you like to install Zextras Theme? [Y]
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'zextras-theme' instead of '/home/martin/zextras-theme-installer/packages/zextras-theme_1.0.1_amd64.deb'
zextras-theme is already the newest version (1.0.1-0ubuntu1~).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

I installed this theme many times but can't figure out why this time it won't work. Chmod or chown to zimbra:zimbra does not change.
Files of the theme aren't copied. Skin files and directory are not created/present.
Files are not size 0kb.

--------------

Hello everyone, it's been a while! Good to see many who've made progress on this script here is the updated version for 10.1.7. I tested it myself the repos have been updated and all works well!

This has been updated for Ubuntu 22.04 as of 4/29/2025

So here we go!


I will use my test domain mx.innotel.us for demonstration purposes which is a live server.

Code: Select all

cd /usr/src

#Install Deps Ubuntu
apt update && apt -y upgrade
apt -y install gcc make g++ openssl libxml2-dev perl net-tools gnupg2 locate mlocate git software-properties-common openjdk-8-jdk ant ant-optional ruby git maven build-essential

#Stop & Remove Postfix
systemctl stop postfix
apt -y remove postfix

#Install Webmin for Administration
cd /usr/src
wget https://www.webmin.com/download/deb/webmin-current.deb
dpkg -i webmin-current.deb
apt -fy install

#Set Hostname
hostnamectl set-hostname mx.innotel.us --static

#Disable Firewall & Reboot
systemctl stop ufw
systemctl disable ufw

reboot

Reboot your system for settings to take effect

Code: Select all

#Install Zimbra

#Add Zimbra Keyring
apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9BE6ED79

#Update Packages
apt update


#Disable systemd-resolved Stub
sudo sed -r -i.orig 's/#?DNSStubListener=yes/DNSStubListener=no/g' /etc/systemd/resolved.conf
sudo systemctl disable systemd-resolved
sudo systemctl stop systemd-resolved
sudo unlink /etc/resolv.conf
echo -e "nameserver 127.0.0.1\nnameserver 1.1.1.1" | sudo tee /etc/resolv.conf


#Edit Hosts
nano /etc/hosts

127.0.0.1 localhost.localdomain localhost
::1 localhost.localdomain localhost
192.168.1.194 mx.innotel.us mx

#Make sure Iptables is disabled

systemctl stop iptables
systemctl disable iptables
systemctl stop ip6tables
systemctl disable ip6tables
iptables -F

reboot

Reboot your system again for settings to take effect before final installation.

Code: Select all

#Install Zimbra
cd /usr/src

#20
wget https://repo.innotel.us/zcs-10.1.7_GA_1000.UBUNTU20_64.20250504142753.tgz
tar zxf zcs-10.1.7_GA_1000.UBUNTU20_64.20250504142753.tgz
cd zcs-10.1.7_GA_1000.UBUNTU20_64.20250504142753
./install.sh

#22
wget https://repo.innotel.us/zcs-10.1.7_GA_1000.UBUNTU22_64.20250504224110.tgz
tar zxf zcs-10.1.7_GA_1000.UBUNTU22_64.20250504224110.tgz
cd zcs-10.1.7_GA_1000.UBUNTU22_64.20250504224110
./install.sh

Y for use Zimbra repository
Y for All Packages

7,4 <set password>
1,7,37 <set timezone> (America/New_York)
r,a,Yes,[Enter],[Enter],Yes <complete setup>


#Redirect to HTTPS only
su zimbra
zmprov ms `zmhostname` zimbraReverseProxyMailMode redirect
zmprov ms mail.innotel.us zimbraMtaLmtpHostLookup native
zmprov mcf zimbraMtaLmtpHostLookup native
zmproxyctl restart
exit

#Optional - Create Swap
dd if=/dev/zero of=/opt/zimbra/1024Mb.swap bs=1M count=1024
chmod 600 /opt/zimbra/1024Mb.swap
mkswap /opt/zimbra/1024Mb.swap
swapon /opt/zimbra/1024Mb.swap

#Install LetsEncrypt SSL Certificate
cd /usr/src
apt update
apt -y install python3 python3-venv libaugeas0 libaugeas-dev python3-pip

apt -y remove certbot
python3 -m venv /opt/certbot/
/opt/certbot/bin/pip install --upgrade pip
/opt/certbot/bin/pip install certbot certbot-apache
ln -s /opt/certbot/bin/certbot /usr/bin/certbot

#Automatic renewal setup
echo "0 0,12 * * * root /opt/certbot/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew --force-renewal --preferred-chain "ISRG Root X1"" | tee -a /etc/crontab > /dev/null

#Monthly Update for Certbot
/opt/certbot/bin/pip install --upgrade certbot certbot-apache

#If errors
sudo rm -rf /opt/certbot

#Stop Zimbra Mailbox & Proxy
su zimbra
zmproxyctl stop
zmmailboxdctl stop
exit

#Request Certificate

##ENABLE HTTP SERVICE ON ZIMBRA IF NECESSARY FOR CERTBOT
# sudo su - zimbra
# zmprov ms `zmhostname` zimbraReverseProxySSLToUpstreamEnabled FALSE
# /opt/zimbra/libexec/zmproxyconfig -e -w -o -a 8080:80:8443:443 -x both -H  mx.innotel.us
# zmcontrol  stop 
# zmcontrol start
# exit

certbot certonly --key-type rsa --preferred-chain "ISRG Root X1" --standalone -d mx.innotel.us


#PrivKey
/etc/letsencrypt/live/mx.innotel.us/privkey.pem

#Cert
/etc/letsencrypt/live/mx.innotel.us/fullchain.pem


#Add ISRG Root Certificate
wget --no-check-certificate -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt
cat /tmp/ISRG-X1.pem >> /etc/letsencrypt/live/mx.innotel.us/fullchain.pem


#Make Lets Encrypt Zimbra Directory
mkdir /opt/zimbra/ssl/letsencrypt
cp /etc/letsencrypt/live/mx.*/* /opt/zimbra/ssl/letsencrypt/


#Set Permissions
chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*


#Verify Certificate
su zimbra
cd /opt/zimbra/ssl/letsencrypt
/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem fullchain.pem


#Make Backup & Create Commercial Key
cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y%m%d")
cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key


#Deploy Certificate
/opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem fullchain.pem


#Start Zimbra Mailbox & Proxy
zmproxyctl start
zmmailboxdctl start
exit


#Remove Unnecessary files
apt -y autoremove


#If you receive snap loop messages or emails
#Disable snap reporting emails
df -Th #Check for /dev/loop and edit the line below to fit the number of loops
su - zimbra 
zmlocalconfig -e zmstat_df_excludes='/dev/loop0:/dev/loop1:/dev/loop2:/dev/loop3:/dev/loop4:/dev/loop5:/dev/loop6'
zmstatctl restart 
exit

swapoff -a

Extra bonus to add zextras theme

Code: Select all

#Add Zextras Zimbra Theme

cd /usr/src
wget https://repo.innotel.us/zextras-theme-ubuntu.tgz
unzip zextras-theme-ubuntu.tgz
cd zextras-theme-installer
chmod +x install.sh
./install.sh <enter> <enter>

su - zimbra -c 'zmskindeploy /opt/zimbra/jetty/webapps/zimbra/skins/zextras/'

Any questions feel free to reach out.

Also if you just wanted to build it on your system follow these instructions below

Code: Select all

cd /usr/src
mkdir installer-build
cd installer-build
git clone --depth 1 --branch 10.1.6 https://github.com/Zimbra/zm-build.git
cd zm-build
ENV_CACHE_CLEAR_FLAG=true ./build.pl --ant-options -DskipTests=true --git-default-tag=10.1.7,10.1.6,10.1.5,10.1.4,10.1.3,10.1.2,10.1.1,10.1.0 --build-release-no=10.1.7 --build-type=FOSS --build-release=DAFFODIL --build-release-candidate=GA --build-thirdparty-server=files.zimbra.com --no-interactive

[innotelinc]

Looks like they changed a few things in the zextras. Here an updated way to install it, which I just tested.


cd /usr/src
wget https://repo.innotel.us/zextras-theme-ubuntu.tgz
tar zxf zextras-theme-ubuntu.tgz
cd zextras-theme-installer/packages
dpkg -i zextras-theme_1.0.1_amd64.deb
su - zimbra -c 'zmmailboxdctl restart'

#Disable Modern UI

nano /opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/classes/messages/ZmMsg.properties

#Edit lines (614, 619, 620) to reflect

clientAdvanced = Default
clientPreferred =
clientModern =

nano /opt/zimbra/jetty_base/webapps/zimbra/public/login.jsp

#Around line 704 remove ----> lines search for fmt:message key="clientPreferred" and fmt:message key="clientAdvanced"


704 ----> <option value="preferred" <c:if test="${client eq 'preferred'}">selected</c:if> > <fmt:message key="clientPreferred"/></option>
<option value="advanced" <c:if test="${client eq 'advanced'}">selected</c:if>> <fmt:message key="clientAdvanced"/></option>
<c:if test="${modernSupported}">
707 ----> <option value="modern" <c:if test="${client eq 'modern'}">selected</c:if>> <fmt:message key="clientModern"/></option>
</c:if>

#So it looks like

<option value="advanced" <c:if test="${client eq 'advanced'}">selected</c:if>> <fmt:message key="clientAdvanced"/></option>
<c:if test="${modernSupported}">
</c:if>

[Martinwiertz]

Thank you!!
After reading your solution I ran the install command and it is working now. I am using FOSS and do not have Modern UI,
dpkg install and restart mailbox.

Great.

Looks like they changed a few things in the zextras. Here an updated way to install it, which I just tested.


cd /usr/src
wget https://repo.innotel.us/zextras-theme-ubuntu.tgz
tar zxf zextras-theme-ubuntu.tgz
cd zextras-theme-installer/packages
dpkg -i zextras-theme_1.0.1_amd64.deb
su - zimbra -c 'zmmailboxdctl restart'

#Disable Modern UI

nano /opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/classes/messages/ZmMsg.properties

#Edit lines (614, 619, 620) to reflect

clientAdvanced = Default
clientPreferred =
clientModern =

nano /opt/zimbra/jetty_base/webapps/zimbra/public/login.jsp

#Around line 704 remove ----> lines search for fmt:message key="clientPreferred" and fmt:message key="clientAdvanced"


704 ----> <option value="preferred" <c:if test="${client eq 'preferred'}">selected</c:if> > <fmt:message key="clientPreferred"/></option>
<option value="advanced" <c:if test="${client eq 'advanced'}">selected</c:if>> <fmt:message key="clientAdvanced"/></option>
<c:if test="${modernSupported}">
707 ----> <option value="modern" <c:if test="${client eq 'modern'}">selected</c:if>> <fmt:message key="clientModern"/></option>
</c:if>

#So it looks like

<option value="advanced" <c:if test="${client eq 'advanced'}">selected</c:if>> <fmt:message key="clientAdvanced"/></option>
<c:if test="${modernSupported}">
</c:if>

[innotelinc]

Glad I could help!

[Martinwiertz]

But..... after the release upgrade from 20.04 to 22.04 I ran in to problems.

First a few days ago I upgraded FOSS 10.0 to 10.1. All went wel.
Today I upgraded Ubuntu as described by other user in https://wiki.zimbra.com/wiki/AGibanelBt ... tu-Upgrade
All went well and Zimbra was running after Ubuntu upgrade.
After some checks Zimbra was not running perfectly. Some logging had PID errors so I ran the install script as described. FOSS 22.04 release.
Then suddenly the server used Modern UI as default. The 20.04 to 22.04 release on FOSS changes to Modern UI.

I had to apply your changes to disable Modern UI. I am glad you provided it.
or apply

su zimbra
zmprov mcf zimbraModernWebClientDisabled TRUE

or apply

Admin console - external COS has a setting to change the default login from Modern to Classic.

(serveral methods)

Thanks again. Server works again. Ubuntu 22.04 and 10.1.8.
I will monitor for the next days.

-----------------

Glad I could help!

[GlooM]

Greetings!

Neural networks say that Zimbra has started making the FOSS version again (official releases). But I can't find anything like this on the site, only builds from enthusiasts. Tell me, did neural networks mislead me? -)

What is the best way to upgrade the free version 8.8.15 (Ubuntu 18.04) to 10.1 now? Any instructions?