Skip to main content
Solved

Immutable Backup on Linux Hardened Repository


I set up a linux hardened repository for immutable backups. In the Backup Repository I have set the minimu 7 days as immutable.

The Backup Job finished sucessfully on this linux repository. But i can still delete the backup. I have also checked in Linux directory, there should all backup files have an extension “i” to say that this file is immutable. But there is also no “i” in the directory.

 

What am I doing wrong? Can someone help me?

Best answer by SchuleRothrist

Sorry the last picture is from a Computer that actually not finished backing up.

 

I have now a successful backup from a smaler one. It looks like it worked. I cant delete it from Veeam Disk. Also have the “i” in the repository.

 

I have still ssh activated, due to set up. Does this affect somehow if i disable the ssh, i think its recommendet to deactivate ssh if all is set up?

View original
Did this topic help you find an answer to your question?

35 comments

Mildur
Forum|alt.badge.img+12
  • Influencer
  • 1033 comments
  • February 10, 2022

Are you running synthentic or active fulls periodically?

You must configure FullBackups, or the files won’t be immutable.

Forever Forward Incremental Backup Chains will not be immutable


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

Do you get any error messages? What kind of backup do you perform? VM? Agent? Database?


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022
Mildur wrote:

Are you running synthentic or active fulls periodically?

You must configure FullBackups, or the files won’t be immutable.

Forever Forward Incremental Backup Chains will not be immutable

Wrong selected chain-type should show a error in console. It should not be possible to configure this. Would be a bug ...


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
Mildur wrote:

Are you running synthentic or active fulls periodically?

You must configure FullBackups, or the files won’t be immutable.

Forever Forward Incremental Backup Chains will not be immutable

I dont get any errors.

I set up asynthetic full backup periodically. So i have to deactivate the synthetic and activate the active full backup?

 


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

No, synthetic and active full both works.


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

What backup job do you perform?


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
vNote42 wrote:

No, synthetic and active full both works.

Ok, but i have still the problem, that my backup is not immutable. Any idea about that?


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022
SchuleRothrist wrote:
vNote42 wrote:

No, synthetic and active full both works.

Ok, but i have still the problem, that my backup is not immutable. Any idea about that?

do you backup VMs or files or Agents or … ?


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
vNote42 wrote:
SchuleRothrist wrote:
vNote42 wrote:

No, synthetic and active full both works.

Ok, but i have still the problem, that my backup is not immutable. Any idea about that?

do you backup VMs or files or Agents or … ?

I do Server, and add the computers, and these computers are VM’s

 


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

What Linux distribution and version do you use?


Cragdoo
Forum|alt.badge.img+9
  • Veeam Vanguard
  • 130 comments
  • February 10, 2022

Did you follow the guide for creating the immutable linux repo?

https://helpcenter.veeam.com/docs/backup/vsphere/hardened_repository_deploy.html?ver=110

 


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
vNote42 wrote:

What Linux distribution and version do you use?

I am using Ubuntu Server 20.04.3 LTS.

I have all set it up like this: https://nolabnoparty.com/en/veeam-v11-hardened-repository-immutability-pt-1/

but instead of one Backup Disk i chose software Raid 6 in the installation, cause i have 6 disks.


MicoolPaul
Forum|alt.badge.img+22
  • 2344 comments
  • February 10, 2022

And also:

 

What file system is the repository using?

And can you show us the repository settings/configuration in Veeam?


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
MicoolPaul wrote:

And also:

 

What file system is the repository using?

And can you show us the repository settings/configuration in Veeam?

The file system is xfs (or do you mean something else?)

 

this is the configuration in veeam

 

 


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

could you please check the system time on your hardened repo server


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
vNote42 wrote:

could you please check the system time on your hardened repo server

the time on the server is one hour behind the local time


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
Cragdoo wrote:

Did you follow the guide for creating the immutable linux repo?

https://helpcenter.veeam.com/docs/backup/vsphere/hardened_repository_deploy.html?ver=110

 

I have used this discription: https://nolabnoparty.com/en/veeam-v11-hardened-repository-immutability-pt-1/ 
but im not a linux master


MicoolPaul
Forum|alt.badge.img+22
  • 2344 comments
  • February 10, 2022
SchuleRothrist wrote:
vNote42 wrote:

could you please check the system time on your hardened repo server

the time on the server is one hour behind the local time

I can see you’re signed in as root, root can bypass immutability, is this the problem?

 

Go to the directory with the backups in and use the lsattr command to see the immutability flag


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

could you share the screenshot of lsattr?


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022

How did you try to delete files? within Linux (shell) or by deleting restore points in VBR console?


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
MicoolPaul wrote:
SchuleRothrist wrote:
vNote42 wrote:

could you please check the system time on your hardened repo server

the time on the server is one hour behind the local time

I can see you’re signed in as root, root can bypass immutability, is this the problem?

 

Go to the directory with the backups in and use the lsattr command to see the immutability flag

For setting up i have used another user and used Single-use credentials to set up veeam repository. The user was in root and afterwards i deleted the user from root again.

This is the lsattr view

 

 


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
vNote42 wrote:

How did you try to delete files? within Linux (shell) or by deleting restore points in VBR console?

I have tried to delete it from veeam directly, after that i was looking for the lsattr and cant find the immutable “i”


vNote42
Forum|alt.badge.img+13
  • On the path to Greatness
  • 1246 comments
  • February 10, 2022
SchuleRothrist wrote:
MicoolPaul wrote:
SchuleRothrist wrote:
vNote42 wrote:

could you please check the system time on your hardened repo server

the time on the server is one hour behind the local time

I can see you’re signed in as root, root can bypass immutability, is this the problem?

 

Go to the directory with the backups in and use the lsattr command to see the immutability flag

For setting up i have used another user and used Single-use credentials to set up veeam repository. The user was in root and afterwards i deleted the user from root again.

This is the lsattr view

 

 

please let us see the file extentions


  • Author
  • Comes here often
  • 14 comments
  • February 10, 2022
vNote42 wrote:
SchuleRothrist wrote:
MicoolPaul wrote:
SchuleRothrist wrote:
vNote42 wrote:

could you please check the system time on your hardened repo server

the time on the server is one hour behind the local time

I can see you’re signed in as root, root can bypass immutability, is this the problem?

 

Go to the directory with the backups in and use the lsattr command to see the immutability flag

For setting up i have used another user and used Single-use credentials to set up veeam repository. The user was in root and afterwards i deleted the user from root again.

This is the lsattr view

 

 

please let us see the file extentions

 


  • Author
  • Comes here often
  • 14 comments
  • Answer
  • February 10, 2022

Sorry the last picture is from a Computer that actually not finished backing up.

 

I have now a successful backup from a smaler one. It looks like it worked. I cant delete it from Veeam Disk. Also have the “i” in the repository.

 

I have still ssh activated, due to set up. Does this affect somehow if i disable the ssh, i think its recommendet to deactivate ssh if all is set up?


Comment