Here's a "clean" installation on an Ubuntu Server Ubuntu 24.04.3 LTS, in a VM for testing, and several times during the installation tests via script, I encountered the following errors...
-> Processes done:
- Ubuntu Server installation
- Full update/upgrade
- Installation of management packages (such as ngrep/tcpdump)
- Configured hosts, hostname, and DNS (to point entries to the server's IP)
- Installation of the Zextras repository via script
- Installation of Carbonio via Single Server Script
More information: sometimes it works, sometimes it generates these errors.
Out of 5 attempts, 2 were OK after several reboots and 3 stopped at these errors...
.local.com.br is some domain test local.
==============
Setting replication password...done.
Setting Postfix password...done.
Setting amavis password...done.
Setting nginx password...done.
Creating server entry for carbonio.local.com.br...done.
Setting IP Mode...done.
Saving CA in ldap...done.
Saving SSL Certificate in ldap...done.
Generating dhparam key...done.
Setting service ports on carbonio.local.com.br...done.
Checking current setting of ReverseProxyAvailableLookupTargets
Querying LDAP for other mailstores
Searching LDAP for reverseProxyLookupTargets...done.
Adding carbonio.local.com.br to ReverseProxyAvailableLookupTargets
Updating LDAP Schema version to '1756722690'...done.
Setting TimeZone Preference...done.
Disabling strict server name enforcement on carbonio.local.com.br...done.
Setting Public Service Hostname carbonio.local.com.br...done.
Initializing mta config...done.
Setting services on carbonio.local.com.br...done.
Adding carbonio.local.com.br to MailHostPool in default COS...done.
Creating domain local.com.br...done.
Setting default domain name...done.
Setting value of postfix myorigin...done.
Creating domain local.com.br...already exists.
Creating admin account zextras@local.com.br...done.
Creating root alias...done.
Creating postmaster alias...done.
Setting infrastructure notification sender and recipients accounts...done.
Creating user spam.utanx0aq@local.com.br...done.
Creating user ham.f1e6ixrx@local.com.br...done.
Creating user virus-quarantine.ecto176oz@local.com.br...done.
Setting spam, training and anti-virus quarantine accounts...done.
Initializing store sql database...done.
Setting up syslog.conf...done.
Starting servers...
stopping carbonio-directory-server.target...Done.
stopping carbonio-appserver.target...Done.
stopping carbonio-proxy.target...Done.
stopping carbonio-mta.target...Done.
starting carbonio-directory-server.target...Done.
starting carbonio-appserver.target...Done.
starting carbonio-proxy.target...Done.
starting carbonio-mta.target...Done.
done.
Creating galsync account for default domain...done.
Setting up zextras crontab...done.
Moving /tmp/zmsetup.20251107-121135.log to /opt/zextras/log
Moving /tmp/zmsetup.20251107-121135.log to /opt/zextras/log
service-discover: error: unable to create ACL bootstrap token: Failed ACL bootstrapping: Unexpected response code: 500 (failed inserting bootstrap token: No such policy with ID: 00000000-0000-0000-0000-000000000001)
gpg: can't open '/etc/zextras/service-discover/cluster-credentials.tar.gpg': No such file or directory
gpg: decrypt_message failed: No such file or directory
tar: This does not look like a tar archive
tar: consul-acl-secret.json: Not found in archive
tar: Exiting with failure status due to previous errors
Insert the cluster credential password:
========================
Regards;
Thank you Carlos. Now that is what I call proper issue description. Many people just make a post that leaves more questions.
Try again changing the domain to lab.com.br (for testing purposes only), remembering that it has DNS (to resolve the hostname and mx/webmail to Carbonio's IP).
Same error:
In Screen:
=====
cat /tmp/zmsetup.log
ri Nov 7 19:20:36 2025 Running as zextras user: /opt/zextras/bin/zmgsautil createAccount -a galsync.mtqzezb3g@lab.com.br -n InternalGAL --domain lab.com.br -s carbonio.lab.com.br -t zimbra -f _InternalGAL -p 1d
galsync.mtqzezb3g@lab.com.br 9c47997d-a789-49a5-b943-31ad2fabaa30
Fri Nov 7 19:23:01 2025 done.
Fri Nov 7 19:23:01 2025 Setting up zextras crontab...
Fri Nov 7 19:23:01 2025 crontab: Taking a copy of zextras user crontab file.
Fri Nov 7 19:23:02 2025 crontab: Looking for ZEXTRAS-START in existing crontab entry.
Fri Nov 7 19:23:02 2025 crontab: ZEXTRAS-START not found truncating zextras crontab and starting fresh.
Fri Nov 7 19:23:02 2025 crontab: Looking for ZEXTRAS-END in existing crontab entry.
Fri Nov 7 19:23:02 2025 crontab: ZEXTRAS-END not found truncating zextras crontab and starting fresh.
Fri Nov 7 19:23:02 2025 crontab: Adding carbonio-core specific crontab entries
Fri Nov 7 19:23:02 2025 checking isEnabled carbonio-directory-server
Fri Nov 7 19:23:02 2025 carbonio-directory-server is enabled
Fri Nov 7 19:23:02 2025 crontab: Adding carbonio-directory-server specific crontab entries
Fri Nov 7 19:23:02 2025 checking isEnabled carbonio-appserver
Fri Nov 7 19:23:02 2025 carbonio-appserver is enabled
Fri Nov 7 19:23:02 2025 crontab: Adding carbonio-appserver specific crontab entries
Fri Nov 7 19:23:02 2025 checking isEnabled carbonio-mta
Fri Nov 7 19:23:02 2025 carbonio-mta is enabled
Fri Nov 7 19:23:02 2025 crontab: Adding carbonio-mta specific crontab entries
Fri Nov 7 19:23:02 2025 crontab: installing new crontab
Fri Nov 7 19:23:03 2025 done.
Fri Nov 7 19:23:03 2025 Running as zextras user: /opt/zextras/bin/zmsshkeygen
Generating public/private rsa key pair.
Your identification has been saved in /opt/zextras/.ssh/zimbra_identity
Your public key has been saved in /opt/zextras/.ssh/zimbra_identity.pub
The key fingerprint is:
SHA256:x8LjW1hkgiG/SC0fiSPrd7uO3q9/z2dYgUXfbPgf3dk carbonio.lab.com.br
The key's randomart image is:
+---[RSA 2048]----+
| . . .. |
| = + .+.|
| . = * . o o. =|
| + = + = . .o=|
| . . o S + +E|
| . . * . o|
| . . . o . o .|
| . + . o... o |
| .o.*=+. .oo |
+----[SHA256]-----+
Key has comment 'carbonio.lab.com.br'
Your identification has been saved with the new passphrase.
Fri Nov 7 19:23:06 2025 *** Running as zextras user: /opt/zextras/bin/zmupdateauthkeys
Updating keys for carbonio.lab.com.br
Fetching key for carbonio.lab.com.br
Updating keys for carbonio.lab.com.br
Updating /opt/zextras/.ssh/authorized_keys
Fri Nov 7 19:23:11 2025 checking isEnabled carbonio-directory-server
Fri Nov 7 19:23:11 2025 carbonio-directory-server is enabled
Fri Nov 7 19:23:11 2025 checking isEnabled carbonio-appserver
Fri Nov 7 19:23:11 2025 carbonio-appserver is enabled
Fri Nov 7 19:23:11 2025 checking isEnabled carbonio-mta
Fri Nov 7 19:23:11 2025 carbonio-mta is enabled
Fri Nov 7 19:23:11 2025
Fri Nov 7 19:23:11 2025 Moving /tmp/zmsetup.20251107-191505.log to /opt/zextras/log
Fri Nov 7 19:23:11 2025
Fri Nov 7 19:23:11 2025 Moving /tmp/zmsetup.20251107-191505.log to /opt/zextras/log
====
I am using Virtual Box for teste now, but erro i see in VMware to.
Regards;
Moving /tmp/zmsetup.20251108-131406.log to /opt/zextras/log service-discover: error: unable to create ACL bootstrap token: Failed ACL bootstrapping: Unexpected response code: 500 (No cluster leader) gpg: can't open '/etc/zextras/service-discover/cluster-credentials.tar.gpg': No such file or directory gpg: decrypt_message failed: No such file or directory tar: This does not look like a tar archive tar: consul-acl-secret.json: Not found in archive tar: Exiting with failure status due to previous errors Insert the cluster credential password: service-discover: error: unable to open /etc/zextras/service-discover/cluster-credentials.tar.gpg: cannot find Cluster credential in /etc/zextras/service-discover/cluster-credentials.tar.gpg, please copy the file from the existing server or upload it to LDAP Cannot access to bootstrap token ERROR: role "carbonio_adm" already exists ERROR: database "carbonio_adm" already exists Database: 127.0.0.1:5432 user carbonio_adm Check postgres connection: psql: FATAL ERROR (exit code 2). (see EXIT STATUS section in psql man documentation) Error connecting to Consul agent: Error loading token file /etc/carbonio/files-db/service-discover/token : open /etc/carbonio/files-db/service-discover/token: no such file or directory psql: error: connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" Token file "/etc/carbonio/mailbox-db/service-discover/token" missing, Unable to proceed without consul token. Exiting! Database: 127.0.0.1:5432 user carbonio_adm Error connecting to Consul agent: Error loading token file /etc/carbonio/docs-connector-db/service-discover/token : open /etc/carbonio/docs-connector-db/service-discover/token: no such file or directory Database: 127.0.0.1:5432 user carbonio_adm Check postgres connection: psql: FATAL ERROR (exit code 2). (see EXIT STATUS section in psql man documentation) Error connecting to Consul agent: Error loading token file /etc/carbonio/tasks-db/service-discover/token : open /etc/carbonio/tasks-db/service-discover/token: no such file or directory psql: error: connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" Database: 127.0.0.1:5432 user carbonio_adm Check postgres connection: psql: FATAL ERROR (exit code 2). (see EXIT STATUS section in psql man documentation) Error connecting to Consul agent: Error loading token file /etc/carbonio/ws-collaboration-db/service-discover/token : open /etc/carbonio/ws-collaboration-db/service-discover/token: no such file or directory psql: error: connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" Reading package lists... Done Building dependency tree... Done Reading state information... Done
Then it goes on asking: Insert the cluster credential password:
Insert the cluster credential password: service-discover: error: unable to open /etc/zextras/service-discover/cluster-credentials.tar.gpg: cannot find Cluster credential in /etc/zextras/service-discover/cluster-credentials.tar.gpg, please copy the file from the existing server or upload it to LDAP Cannot access to bootstrap token Database: 127.0.0.1:5432 user carbonio_adm Check postgres connection: psql: FATAL ERROR (exit code 2). (see EXIT STATUS section in psql man documentation) Error connecting to Consul agent: Error loading token file /etc/carbonio/message-dispatcher-db/service-discover/token : open /etc/carbonio/message-dispatcher-db/service-discover/token: no such file or directory psql: error: connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" connection to server at "127.0.0.1", port 5432 failed: FATAL: password authentication failed for user "carbonio_adm" Reading package lists... Done Building dependency tree... Done Reading state information... Done The following NEW packages will be installed: carbonio-message-dispatcher-ce
Next is:
Checking of database schema... Done. The database needs to be updated! Updating database... Failed! Cannot run script file '/etc/carbonio/message-dispatcher/sql-scripts/migrations//6.0.0.sql' Reading package lists... Done Building dependency tree... Done
And this:
Get:27 https://repo.zextras.io/release/ubuntu noble/main amd64 carbonio-videoserver-ce amd64 1.1.14-1noble [2,160 kB] Fetched 19.8 MB in 25s (795 kB/s) Preconfiguring packages ... ls: cannot access '/usr/lib/cdebconf/frontend': No such file or directory Selecting previously unselected package libdebian-installer4:amd64.
And last:
Insert the cluster credential password: service-discover: error: unable to open /etc/zextras/service-discover/cluster-credentials.tar.gpg: cannot find Cluster credential in /etc/zextras/service-discover/cluster-credentials.tar.gpg, please copy the file from the existing server or upload it to LDAP Cannot access to bootstrap token The service-discover password is: TdTeOW8tkOwGah8kDss
The WebUI shows: Something went wrong
The above is my experience on installing 25.9.0 on Ubuntu 24.04.
This is a totally unusable installation!
@itguy @Sharif
Thank you for adding more information.
Exactly, I mentioned in several posts that version 25.9 is "unusable" on Ubuntu 24.04, with various errors even during installation, and that's if it finishes successfully and more error ocurred....
Unfortunately, a serious problem like this for over 20 days is unacceptable, especially considering Zextras's vision of attracting people who leave Zimbra Free, but this way they are only really forcing everyone to move to a cloud...
😐
Thank you Carlos. Now that is what I call proper issue description. Many people just make a post that leaves more questions.
Thank you for your comment. I'm trying to help as much as possible, as I believe it's in our interest (Carbonio users) and even more so in Zextras' interest.
However, it's quite complicated; unfortunately, Zimbra was unbeatable in terms of support.
Regards;
Hi Carlos,
Have you tried installing it manually?
It seems that the installation script provided by the Zextras team did not properly set up the service-discover mesh.
Alternatively, you can try resetting the service-discover password, you can find it in the documentation under Carbonio Mesh Credentials.
After that, try running the pending setup again.
Hi!
Even when the installation finishes (as in the other user's post), there are a lot of errors, both in the logs and in the web interface... Problems and more problems...
Hi Carlos
From the logs you shared, it looks like the issue is caused by the service mesh credentials and some services being down that's probably why it can't bootstrap. Try installing it manually. It went smoothly when I did it
Hi!
Were you able to install Carbonio version 25.9 on Ubuntu 24.04 and did everything work? Because there are so many reported errors, as I mentioned, even when the installation finishes without errors, other serious problems appear....
Hi Carlos
Yes, everything is smooth, but you need to make sure to check all the services once the package installation is completed because it affects the bootstrap and pending-setup process.
Here’s an example of the error:
Insert the cluster credential password: service-discover: error: unable to open /etc/zextras/service-discover/cluster-credentials.tar.gpg: cannot find Cluster credential in /etc/zextras/service-discover/cluster-credentials.tar.gpg, please copy the file from the existing server or upload it to LDAP
Actually, you just need to regenerate the cluster credentials, and also make sure these two services are running: carbonio-openldap and service-discover, because they are highly dependent on each other. After that, you can troubleshoot the issue one by one
You really need patience during the installation process and the setup. And I also recommend not using VirtualBox, because Carbonio requires high resources to run properly, especially if you install all the packages. You can use Proxmox as the hypervisor to deploy Carbonio.
Problems for many people, problems that either don't finish the installation or finish but cause errors in Webmail, errors saving settings, errors and more errors that make the current version unusable. I really don't know how you managed to use it; I could give a "step-by-step" explanation, since Zextras support already informed me (even though it was quite a while ago) that the problems were being analyzed, but the delay is totally unfeasible.
Honestly, it's very complicated.