# Install grommunio 2026.06.1: From ISO to Working Groupware

Source: https://forgeone.solutions/en/tech/install-grommunio-2026
Language: en
Published: 2026-09-01
Updated: 2026-10-22

From verified ISO to production groupware: appliance installation, domain, users, Admin UI, web login, test mail and operational baseline.

## Overview

The validated baseline is the openSUSE-based grommunio appliance 2026.06.1. The examples consistently use the neutral appliance domain https://mail.example.test; paths such as /web/, /admin/, /auth/, /chat/, /meet/ and /files/ live on the same appliance.This article takes you from the grommunio appliance to a usable system with admin login, web login, first domain, first user and test mail.

The starting point is the openSUSE-based grommunio appliance. All CLI steps are written for that appliance unless a separate system is explicitly named.

## Tested environment

- grommunio 2026 on the openSUSE-based grommunio appliance.
- All appliance commands are run directly on the grommunio appliance.
- Public examples consistently use the neutral appliance domain https://mail.example.test.

## Goal of this guide

This article puts grommunio platform into a practical context and explains the decisions that matter for a reliable implementation. By the end, you should know what to prepare, how to recognize a working state and what the next useful step is.

## Prerequisites

An existing or planned grommunio environment, matching DNS names, TLS, administrative access and a clear target for mail, collaboration or operations.

## Install grommunio 2026.06.1: from ISO to usable groupware

This article walks through a real installation of [grommunio 2026.06.1](https://docs.grommunio.com/admin/release_notes/) in an isolated KVM lab VM. The goal is not just a booted system, but a usable groupware instance with Admin UI, Web login, first domain, first user, local test mail and reproducible operational checks.

The lab system is called mail.example.test and uses example.test as a synthetic mail domain. Replace these names with real DNS names you control in your own environment.

[![grommunio 2026.06.1 boot menu in the KVM lab](https://forgeone.solutions/media/grommunio-2026-01-boot-menu.png)](https://forgeone.solutions/media/grommunio-2026-01-boot-menu.png)

Screenshot: The grommunio boot menu of the verified 2026.06.1 installation ISO.

## Preparation: DNS, resources and installation medium

Download the installation ISO through the official [grommunio quickstart documentation](https://docs.grommunio.com/admin/quickstart/). For production-like tests, plan at least 4 vCPU, 6 GB RAM, 32 GB system disk and separate storage for mailbox data. The lab used 4 vCPU, 8 GB RAM, a 64 GB system disk and an additional 128 GB disk.

Before installation, define the naming model. For production mail operation, FQDN, MX, autodiscover, TLS certificate, SPF, DKIM and DMARC belong together. Without correct DNS, groupware can work locally, but it will not be a serious mail system.

```bash
sha256sum grommunio.x86_64-2026.06.1-Build5.7.install.iso
# Expected SHA256 from the lab:
# 4a100920fb6bb661d3c09159a3a74568f1c9b56cbbdd9b55f20017d8692023b0
```

## Boot the VM and select the target disk

Boot the VM from the grommunio installation ISO. The installer is intentionally compact: select the target disk, confirm the destructive installation and let the appliance image be written. Before confirming, make absolutely sure you are not selecting a data disk.

[![Selecting the installation disk in the grommunio installer](https://forgeone.solutions/media/grommunio-2026-02-disk-selection.png)](https://forgeone.solutions/media/grommunio-2026-02-disk-selection.png)

Screenshot: The installer shows the available disks and marks the system disk as target.

[![Confirming the destructive installation on the target disk](https://forgeone.solutions/media/grommunio-2026-03-disk-confirmation.png)](https://forgeone.solutions/media/grommunio-2026-03-disk-confirmation.png)

Screenshot: The installation deletes the selected target disk completely.

[![Installation progress of the grommunio appliance](https://forgeone.solutions/media/grommunio-2026-04-installation-progress.png)](https://forgeone.solutions/media/grommunio-2026-04-installation-progress.png)

Screenshot: The appliance image is written to the target disk.

After completion, remove the ISO or switch the boot order back to the virtual disk. The freshly installed grommunio appliance then starts for the first time.

## First boot: CUI, root password, hostname and network

On first boot, you land in the grommunio console user interface. The initial root password is unset. First set a root password, then verify hostname, IP configuration, gateway, DNS and time. On production systems, the hostname must return a complete FQDN.

[![First start of the grommunio console user interface after installation](https://forgeone.solutions/media/grommunio-2026-05-first-cui.png)](https://forgeone.solutions/media/grommunio-2026-05-first-cui.png)

Screenshot: First CUI start after image installation: setup has not been run yet.

[![Root password set in the grommunio CUI](https://forgeone.solutions/media/grommunio-2026-06-root-password.png)](https://forgeone.solutions/media/grommunio-2026-06-root-password.png)

Screenshot: The root password was set in the lab; production environments should use strong managed credentials.

[![grommunio CUI showing host, network and setup status](https://forgeone.solutions/media/grommunio-2026-07-cui-overview.png)](https://forgeone.solutions/media/grommunio-2026-07-cui-overview.png)

Screenshot: The CUI shows host, network and service status before the actual grommunio setup.

```bash
hostnamectl hostname mail.example.test
hostname -f
ip address show
ip route
getent hosts download.grommunio.com
timedatectl
```

In the lab, the appliance had an IP address after first boot, but DNS resolution had to be corrected before setup. Always verify the resolver before setup. If repository downloads fail, DNS is a common cause.

## Run grommunio-setup

Start the setup wizard from the CUI. Core is the central groupware role. Chat, Meet, Files, Office and Archive are optional components and should only be enabled after resources, DNS, TLS and the operating model are clear.

[![Start of the grommunio setup wizard](https://forgeone.solutions/media/grommunio-2026-08-setup-welcome.png)](https://forgeone.solutions/media/grommunio-2026-08-setup-welcome.png)

Screenshot: Start of the guided grommunio setup wizard.

[![Selecting grommunio roles and optional components in setup](https://forgeone.solutions/media/grommunio-2026-09-setup-roles.png)](https://forgeone.solutions/media/grommunio-2026-09-setup-roles.png)

Screenshot: Core is mandatory; additional roles are selected deliberately.

For repository credentials, a lab can use empty values when community repositories are intended. Production environments should clarify subscription, update channel and maintenance model before setup.

[![Repository configuration in grommunio setup](https://forgeone.solutions/media/grommunio-2026-10-repositories.png)](https://forgeone.solutions/media/grommunio-2026-10-repositories.png)

Screenshot: Repository configuration: lab run without commercial credentials.

For small and medium single-node systems, the local database is the straightforward start. External databases are an architecture decision and should be planned together with high availability, backup, roles and operations.

[![Selecting the local database in grommunio setup](https://forgeone.solutions/media/grommunio-2026-11-database.png)](https://forgeone.solutions/media/grommunio-2026-11-database.png)

Screenshot: Local database as the default selection for the lab installation.

## FQDN, domain, relay host and TLS

The FQDN is the technical name of the mail server, for example mail.example.test. The primary mail domain is the domain of the mailboxes, for example example.test. These values can deliberately be different.

[![FQDN mail.example.test in grommunio setup](https://forgeone.solutions/media/grommunio-2026-12-fqdn.png)](https://forgeone.solutions/media/grommunio-2026-12-fqdn.png)

Screenshot: Server FQDN in setup.

[![Primary mail domain example.test in grommunio setup](https://forgeone.solutions/media/grommunio-2026-13-mail-domain.png)](https://forgeone.solutions/media/grommunio-2026-13-mail-domain.png)

Screenshot: Primary mail domain for the first mailboxes.

Configure a relay host only when outbound mail should go through a smart host. For direct delivery you need correct reverse DNS, SPF, DKIM, DMARC and sender reputation instead.

[![Relay host selection in grommunio setup](https://forgeone.solutions/media/grommunio-2026-14-relayhost.png)](https://forgeone.solutions/media/grommunio-2026-14-relayhost.png)

Screenshot: Relay host remains empty in the isolated lab.

A self-signed certificate is fine for the lab. In production, use Let’s Encrypt or your own certificate with matching Subject Alternative Names, typically for mail and autodiscover. Port 80 must be reachable for Let’s Encrypt.

[![TLS selection in grommunio setup with self-signed lab option](https://forgeone.solutions/media/grommunio-2026-15-tls.png)](https://forgeone.solutions/media/grommunio-2026-15-tls.png)

Screenshot: TLS selection: self-signed is suitable only for labs and tests.

[![Progress of the grommunio setup run](https://forgeone.solutions/media/grommunio-2026-16-setup-progress.png)](https://forgeone.solutions/media/grommunio-2026-16-setup-progress.png)

Screenshot: The setup wizard installs and configures the selected components.

## After setup: check services, repositories and ports

After the wizard, do not only check whether the web interface loads. A mail server consists of services, ports, queues, databases and delivery paths. The first operational check belongs directly after installation.

```bash
systemctl --failed
systemctl --type=service --state=running | egrep 'grom|postfix|nginx|mariadb|redis|rspamd|saslauthd'
ss -tulpn
zypper lr -u
zypper refresh
zypper list-patches
firewall-cmd --list-all
```

In the validated lab, grommunio-admin-api, grommunio-antispam, several gromox services, MariaDB, nginx, Postfix, Redis and saslauthd were running. The appliance is based on openSUSE Leap 16.0 and uses systemd-networkd. In this lab, the root filesystem was XFS.

[![grommunio Admin dashboard with running services](https://forgeone.solutions/media/grommunio-2026-17-admin-overview.png)](https://forgeone.solutions/media/grommunio-2026-17-admin-overview.png)

Screenshot: The admin dashboard shows running services and system state.

## Create domain and user

After setup, create a domain and at least one test user. You can do this in the Admin UI or through the CLI. The CLI is useful because it is reproducible and can later become part of automation.

```bash
grommunio-admin domain create example.test -u 25 --title "Example Test"
grommunio-admin user create alex@example.test \
  --domain example.test \
  --lang en_US \
  --pop3-imap true \
  --privWeb true \
  --smtp true
grommunio-admin passwd alex@example.test
grommunio-admin user query username maildir pop3_imap smtp privWeb status
```

[![grommunio Admin UI with configured lab domain example.test](https://forgeone.solutions/media/grommunio-2026-18-admin-domain.png)](https://forgeone.solutions/media/grommunio-2026-18-admin-domain.png)

Screenshot: The lab domain example.test is visible in the admin UI.

[![grommunio Admin UI with the created lab user alex@example.test](https://forgeone.solutions/media/grommunio-2026-19-admin-user.png)](https://forgeone.solutions/media/grommunio-2026-19-admin-user.png)

Screenshot: The user alex@example.test was created in the lab.

## Web login and local test mail

Log into grommunio Web with the test user. Then send a local test mail on the server and verify that it arrives in the mailbox. This does not test external delivery yet, but it validates the local acceptance and delivery path.

[![grommunio Web login of the installed instance](https://forgeone.solutions/media/grommunio-2026-20-web-login.png)](https://forgeone.solutions/media/grommunio-2026-20-web-login.png)

Screenshot: grommunio Web login of the freshly installed lab instance.

```bash
printf "From: admin@example.test\nTo: alex@example.test\nSubject: grommunio lab test mail\n\nThis test mail was generated locally.\n" \
  | sendmail -v alex@example.test

gromox-mailq
journalctl -u postfix -u gromox-delivery -u gromox-delivery-queue --since "10 minutes ago"
```

[![grommunio Web inbox with a locally delivered test mail](https://forgeone.solutions/media/grommunio-2026-21-web-inbox.png)](https://forgeone.solutions/media/grommunio-2026-21-web-inbox.png)

Screenshot: The locally generated test mail is visible in the grommunio Web inbox.

## DNS, DKIM, SPF, DMARC and external delivery

According to the [release notes](https://docs.grommunio.com/admin/release_notes/), grommunio 2026.06.1 includes improvements around Admin Web, DKIM and DNS checks. For real delivery, you still need a deliberately planned mail domain.

- MX points to the mail host.
- A/AAAA records for mail and autodiscover match the environment.
- PTR/reverse DNS matches the sending hostname.
- SPF describes authorized senders.
- DKIM is configured per domain and published in DNS.
- DMARC defines policy and reporting.
- An open relay test must be performed from outside trusted networks.

### Generate the DKIM keypair in the Admin UI

Open the domain in the grommunio Admin UI, go to DNS health and open DKIM. The first dialog shows the current DNS state. On a new system, the external DKIM record is expected to be unresolved until you publish it.

[![grommunio domain detail view with DNS health before DKIM generation](https://forgeone.solutions/media/grommunio-2026-26-dkim-domain-overview.png)](https://forgeone.solutions/media/grommunio-2026-26-dkim-domain-overview.png)

Screenshot: The domain detail view shows DNS health for SPF, SRV, autodiscover and DKIM.

[![DKIM DNS check in the grommunio Admin UI before key generation](https://forgeone.solutions/media/grommunio-2026-27-dkim-dns-check.png)](https://forgeone.solutions/media/grommunio-2026-27-dkim-dns-check.png)

Screenshot: Before key generation, the DKIM DNS check still shows a public-key placeholder.

Click Generate DKIM keypair in the DKIM dialog. In the second dialog, Type rsa and Output mode dns are the usual choices for a TXT record. You can leave the selector empty; grommunio then uses the default selector dkim.

[![DKIM key generation dialog in the grommunio Admin UI](https://forgeone.solutions/media/grommunio-2026-28-dkim-generate-dialog.png)](https://forgeone.solutions/media/grommunio-2026-28-dkim-generate-dialog.png)

Screenshot: The keypair dialog generates the DKIM key for the selected domain.

After Generate, the Admin UI shows the public key for DNS and the required server-side follow-up steps. On the validated system, the private key was created as /var/lib/grommunio-admin-api/example.test.dkim.key. Publish only the TXT record in DNS; the private key stays on the server.

[![Generated DKIM public key with follow-up steps for grommunio-antispam](https://forgeone.solutions/media/grommunio-2026-29-dkim-generated-public-key.png)](https://forgeone.solutions/media/grommunio-2026-29-dkim-generated-public-key.png)

Screenshot: After generation, the Admin UI shows the DKIM TXT record and the server-side follow-up steps.

For signing, grommunio-antispam must be able to read the private key. The Admin UI shows the matching commands. In the validated grommunio 2026.06.1 appliance, grommunio-antispam runs as groas with group grommunio.

```bash
postconf -e 'non_smtpd_milters = $smtpd_milters'
mkdir -m 0700 /var/lib/grommunio-antispam/dkim
cp /var/lib/grommunio-admin-api/example.test.dkim.key /var/lib/grommunio-antispam/dkim/
chown -Rf groas:grommunio /var/lib/grommunio-antispam/dkim
chmod 600 /var/lib/grommunio-antispam/dkim/example.test.dkim.key
systemctl restart postfix
```

Replace example.test with your real mail domain. Then verify DNS publication and an outbound test mail through an external recipient or mail testing service, because local delivery does not fully validate external DKIM signing.

The isolated lab did not evaluate real external delivery. That is intentional: a local NAT test says nothing about whether a server relays from the Internet or whether major providers accept mail from it.

## Updates, backup and operations

Plan updates like you would for a production Linux and mail server: repository refresh, patch list, maintenance window, backup, snapshot, service check and rollback plan. grommunio documents its cadence separately in the [update cycle documentation](https://docs.grommunio.com/kb/update_cycle/).

```bash
zypper refresh
zypper list-patches
zypper patch
systemctl --failed
gromox-mailq
```

- Back up configuration, certificates, database and mail data consistently.
- Test restore with a real procedure, not just on paper.
- Monitor Postfix, gromox services, queue, disk space, certificate validity and mail delivery.
- Keep Admin UI, web access and external ports deliberately separated and firewall rules understandable.

## Final checklist

- ISO verified and booted in an isolated VM.
- Target disk selected deliberately and installation confirmed.
- Root password, hostname, DNS, gateway and time checked.
- grommunio-setup completed.
- FQDN, primary mail domain, TLS mode and optional roles set deliberately.
- Services, ports, repositories and firewall checked.
- Domain and user created.
- grommunio Admin and grommunio Web opened successfully.
- Local test mail delivered and queue checked.
- Open production tasks: real DNS zone, certificate, external delivery, backup, monitoring and update process.

## Mailbox maintenance with gromox-cleaner

After the base installation, validate mailbox maintenance deliberately. The tested grommunio 2026.06.1 appliance ships gromox-cleaner.timer and the one-shot service gromox-cleaner.service. The cleaner purges soft-deleted messages after the configured retention and reclaims orphaned attachment files. It does not replace archiving or backup. It is also not merely an automatic trash-emptying task; it operates on Gromox mailbox and attachment data.

Soft delete means that a message is marked as deleted and remains recoverable within the retention window. Hard delete removes it from the recoverable mailbox data. In the installed version, the service uses the softdelete\_purgetime directive from /etc/gromox/gromox.cfg; if it is not set, the unit falls back to 30d.

```bash
systemctl cat gromox-cleaner.service
systemctl cat gromox-cleaner.timer
systemctl status gromox-cleaner.timer
systemctl list-timers --all | grep gromox-cleaner
```

Once retention, backup, restore and archive design are clear, enable the timer and run a manual validation. In the validated lab, the service completed successfully and reported no test objects to purge.

```bash
systemctl enable --now gromox-cleaner.timer
systemctl start gromox-cleaner.service
journalctl -u gromox-cleaner.service --since "10 minutes ago"
systemctl list-timers gromox-cleaner.timer
```

## Result Validation / Technical Acceptance

| Test area | Check | Expected result | Status |
| --- | --- | --- | --- |
| Installation | Check packages and components | The component is fully installed | PASS |
| Services | Check systemd services | The required services are active | PASS |
| Network | Check ports and URLs | The component is reachable through the intended paths | PASS |
| Core function | Run standalone test | The core function works before deeper integration | PASS |
| Authentication | Test SSO/login | Login works through the intended path or is intentionally not required | PASS or N/A |
| grommunio Web | Check integration from Web | The component is reachable or usable from grommunio Web | PASS or N/A |
| End-to-end | Test real user workflow | The full workflow is reproducibly successful | PASS |
| Restart | Restart services | The function remains available after service restart | PASS |
| Logs | Check relevant logs | No blocking errors in the validated flow | PASS |

## Sources

Vendor and upstream documentation used:

- [grommunio documentation](https://docs.grommunio.com/)
- [grommunio downloads and release information](https://download.grommunio.com/)
- [openSUSE documentation](https://doc.opensuse.org/)

## Deploy grommunio in production?

ForgeOne supports appliances, DNS, TLS, DKIM, migration, licensing, monitoring and ongoing operations.

- [Discuss your grommunio project](https://forgeone.solutions/en/contact)

## Hero image

[![grommunio Admin overview after installation.](https://forgeone.solutions/media/grommunio-2026-install-admin-overview-card.png)](https://forgeone.solutions/media/grommunio-2026-install-admin-overview-card.png)

## Author

Mathias Rumbold

## Category

- [grommunio & Groupware](https://forgeone.solutions/en/tech/install-grommunio-2026?category=grommunio-groupware)

## Tags

- [grommunio](https://forgeone.solutions/en/tech/install-grommunio-2026?tags=grommunio)
- [Groupware](https://forgeone.solutions/en/tech/install-grommunio-2026?tags=groupware)
- [Mail server](https://forgeone.solutions/en/tech/install-grommunio-2026?tags=mailserver)
- [Linux](https://forgeone.solutions/en/tech/install-grommunio-2026?tags=linux)
- [Open Source](https://forgeone.solutions/en/tech/install-grommunio-2026?tags=open-source)

## Start your grommunio project cleanly

ForgeOne supports planning, installation, migration and operations for grommunio as a sovereign groupware platform.

[Discuss a grommunio project](https://forgeone.solutions/en/products/grommunio)

## grommunio 2026 Schritt für Schritt

Die Beiträge bauen chronologisch aufeinander auf: Installation, Security, SSO, Module, Betrieb, Migration, Upgrade und Client-Abnahme. Veröffentlichte Teile werden automatisch verlinkt; geplante Fortsetzungen bleiben sichtbar, aber ohne 404-Link.

1. [Install grommunio 2026.06.1: From ISO to Working Groupware (current part)](https://forgeone.solutions/en/tech/install-grommunio-2026)
2. [grommunio-antispam with Rspamd: Spam Filtering, Learning and Operations Step by Step](https://forgeone.solutions/en/tech/grommunio-antispam-rspamd-2026-step-by-step)
3. [grommunio-auth with Keycloak: SSO and central login step by step](https://forgeone.solutions/en/tech/grommunio-auth-keycloak-2026-step-by-step)
4. [Set up grommunio Meet 2026 without Keycloak and optionally add SSO](https://forgeone.solutions/en/tech/grommunio-meet-2026-step-by-step)
5. [Set Up grommunio Chat 2026: Teams, Channels, Users and Multi-Tenancy Testing](https://forgeone.solutions/en/tech/grommunio-chat-2026-step-by-step)
6. [Set Up grommunio Files and Office: Validate Files, Web Entry and Online Office](https://forgeone.solutions/en/tech/grommunio-files-office-2026-step-by-step)
7. [Set Up grommunio Archive 2026: Archive, Search and Restore Email](https://forgeone.solutions/en/tech/grommunio-archive-2026-step-by-step)
8. [grommunio MDM 2026 step by step: manage ActiveSync devices safely](https://forgeone.solutions/en/tech/grommunio-mdm-2026-step-by-step)
9. [grommunio Multitenancy 2026: organizations, domains and multiple LDAP sources](https://forgeone.solutions/en/tech/grommunio-multitenancy-2026-step-by-step)
10. [grommunio 2026 Cluster and High Availability: from multi-server lab to tested active/standby homeserver](https://forgeone.solutions/en/tech/grommunio-cluster-ha-2026-step-by-step)
11. [grommunio 2026 disaster recovery and single mailbox restore: backup, full DR and targeted mailbox recovery in the lab](https://forgeone.solutions/en/tech/grommunio-disaster-recovery-single-mailbox-restore-2026-step-by-step)
12. [Migrate IMAP mailboxes to grommunio with imapsync](https://forgeone.solutions/en/tech/grommunio-imap-migration-imapsync-2026-step-by-step)
13. [grommunio: Replace Public Folders with a functional mailbox - step by step](https://forgeone.solutions/en/tech/grommunio-public-folder-functional-mailbox-multiple-domains)
14. [grommunio Web 5.0 in the lab: settings namespace, shared mailboxes and admin impact](https://forgeone.solutions/en/tech/grommunio-web-5-0-in-the-lab)
15. [grommunio 2026.06.2 Upgrade and Technical Acceptance: Keycloak SSO, MFA, AutoDiscover and Mail Flow](https://forgeone.solutions/en/tech/grommunio-2026-06-2-upgrade-keycloak-sso-practice)
16. [grommunio native clients after Keycloak SSO: Thunderbird, Outlook, EWS, EAS and MFA explained](https://forgeone.solutions/en/tech/grommunio-native-clients-after-keycloak-sso)
17. grommunio Monitoring und Alerting im Betrieb
18. grommunio Security Hardening in der Praxis
19. grommunio Operations Troubleshooting: typische Fehler sauber eingrenzen