VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
Hi Everyone,If you are leveraging Generic Storage Backups then keep in mind after the release of version 6.5.0 this functionality will be disabled by default. In order to enable it you will need to contact Kasten support. There are a number of reasons for this move.First of all CSI storage drivers have now become common place and snapshot backups has always been the preferred method for backup. Second GSB was really a temporary solution which provided no data integrity and could result in corruption. After all the side car container was simply copying a live file system.So it was better than having no backup at all but not an optimal solution for true data protection. Here is a link to the official note in the documentation: https://docs.kasten.io/latest/gvs_restricted.html#restrict-gvs
The CIS Benchmarks are essential for finding security issues in IT. CIS-CAT is a tool that can evaluate your systems and provide information on remediating security issues. For Kubernetes you must purchase CIS-CAT PRO.However, there is an open-source alternative KUBE BENCH. There are various ways to run KUBE BENCH but the simplest is to download the package for your OS and run it in on your controlplane node.https://github.com/aquasecurity/kube-bench#running-in-a-kubernetes-cluster Download the latest version:Install the binaries: Run the defined benchmarks, in our case cis-1.5: The results will come out with a convenient colour scheme: For each section a count of pass, warn, and fail is provided with a concrete actions to remediate the problems: After taking the necessary corrective measures you can run the tests again.Now your cluster is lean and mean, next step you need to back it up :)
Another great one inspired from our top Veeam Agent in the UK MP! You have a customer that wants physical servers to backup to offsite (Cloud) object storage directly. They also want to use the Veeam Agent to protect key business stakeholders (C-suite) devices wherever they are around the globe. To prevent opening the cloud storage to accept connections from any public IP address, you decide to force the endpoints to connect indirectly to object storage, using a gateway over the corporate VPN.To achieve this, you create your Veeam backup repository as object storage, specify the connection mode as direct, and set access permissions to “provided by the backup server (traffic goes through a gateway server)”You then create backup jobs that are managed by the VBR server to target the servers, and create backup job policies that are managed by the Veeam Agent for the device endpoints.What happens when you test this? And what is used as the gateway?
Hi Everyone, The new Veeam Legends were just announced and it got me thinking about all the effort everyone puts into the communities. I am finding it a big challenge to keep up. As an IT person you not only need to participate but keep abreast of the all the technologies and ever evolving knowledge base. I have had periods recently when I have struggled to keep up with all my commitments, social media feeds, work, life etc. What are your strategies to keep things moving and keep your sanity at the same time? I am certain that among all the very smart people here there could be some great systems, strategies that we can all benefit from.
Hi Everyone, This should have been obvious to me but… often.. things are not. I love to admit my shortcomings because apart from taming my ego it keeps my bosses' expectations in check 😀.This weekend in a flourishing fit of activity I setup my new Uber Lab. K8S with 5 nodes (remember Kasten community edition allows 5 nodes!), Traefik ingress controller, Metallb Loadbalancer, Calico cni, Longhorn csi and Rook Ceph csi!But how to backup both workloads since they have 2 different volumesnapshotclasses? As @jaiganeshjk pointed out to me you simply need to annotate both volumesnapshotclasses 😄kubectl annotate volumesnapshotclass longhorn k10.kasten.io/is-snapshot-class=true kubectl annotate volumesnapshotclass csi-rbdplugin-snapclass k10.kasten.io/is-snapshot-class=true Sometimes we overlook the simplest things. Thanks again @jaiganeshjk for the quick response.
Go to VeeamONMake your Backup policy StrongAnd remember Miami Beach is real LongDon't go wrongJoin the ThrongSinging the defeat ransomware songDuring the famous last night party at VeeamONLeave your boss with no doubtBecause you will gain the expert's cloutAnd your company's profits will mountLet the cyber criminals poutWhen you punch ransomware in the snoutDon't be a loutGet the heck outTurn up the volume and shoutBecause at VeeamON your knowledge will sproutAnd then there's the swagToo much to fit in a single bagCompetitor's merch left behind in the lagSo make the right choiceAnd prepare to rejoiceVeeamON is where its atCome dressed in a hatStep up to bat Be cool like Alfred the Veeam Legend catOr take in the Vanguard viewsWhile getting all the latest technology newsLeft with no regretGet those travel plans setAnd your backup targets will be metVeeamON is coming up fastIt is going to be a blastSo get on board and climb up to the top of the mastBecause when it comes Data protectionYou
Hi Everybody,This week we are talking to Veeam Vanguard, Veeam Legend Chris Childerhose. Geoff: How did you get started in IT and later into working with Data Protection? Chris: I was always a fan of computers, so I decided once I got to College to take a course in Information Systems. Now, mind you, everything I learned in that 3-year program I did not use when I got out as I am more self-taught, but it is what started my path into the IT realm. I worked with other backup software, but it wasn't until I got a job as a Consultant that I started working with Veeam, and that was the beginning of my journey into Data Protection. I have used it since then and have been able to become very proficient with it, including being an architect for my company. It is a path that I don't regret going down as it has led me to where I am today including the Vanguard/Legend programs as well as others. Geoff: I know you also have authored a book about Veeam as well. Can you tell us about that? How did
Hi Folks,This is an alternative to Docker Desktop. They have now realized a stable version: https://www.suse.com/c/rancher_blog/rancher-desktop-1-0-0-has-arrived/
A lot of us are really busy and while it is nice to read the “create your own Kubernetes” posts, sometimes you just don’t have time to do so. If you just want to jump in and learn to swim as @Rick Vanover said in the last Weekly recap 20 https://www.youtube.com/watch?v=0wn7m1F3lvI then there are some ready to go free clusters that you can play around with. My favorite is the O’reilly Katacoda kubernetes playgroud https://www.katacoda.com/courses/kubernetes/playground but many big cloud providers will give you some free time to evaluate as well. A nice full list has also been composed by a github user name salaboy and learnk8s with various contributors here https://github.com/learnk8s/free-kubernetes Kubernetes is very much a hands on technology. The more you practice the easier it gets. Good luck and most importantly have fun!!
Day 6,An apple a day keeps the doctor away,A Kube Question a Day keeps you feeling OK,And gets you ready to swayEmployers your way with mountains of pay!
We enabled ingress and ingress-dns and we can test this from our host. The ingress-dns addon was created for this purpose and there is a page on the Kubernetes documentation page that we can follow to try out our test at the bottom of the post. After enabling the ingress and ingress-dns addons in windows we need to perform the following powershell command: Add-DnsClientNrptRule -Namespace ".test" -NameServers "$(minikube ip)"Get-DnsClientNrptRule | Where-Object {$_.Namespace -eq '.test'} | Remove-DnsClientNrptRule -Force; Add-DnsClientNrptRule -Namespace ".test" -NameServers "$(minikube ip)" Now back in the command line bash (type bash) apply this manifest: kubectl apply -f https://raw.githubusercontent.com/kubernetes/minikube/master/deploy/addons/ingress-dns/example/example.yaml now try to do a dns lookup on the ingress that was created: nslookup hello-john.test $(minikube ip)nslookup hello-jane.test $(minikube ip) You should be able to ping from the host (laptop in my case) as well:
A huge ransomware attack on the Library system of North America’s 4th largest city 😓. It happened a few weeks ago but was devastating. It would be interesting to know what backups they had and how they were setup. https://www.cbc.ca/news/canada/toronto/toronto-public-library-cybersecurity-attack-services-restored-january-1.7038567
As @BertrandFR in his post mentioned a while back https://community.veeam.com/kubernetes-korner-90/kubernetes-the-documentary-1595There is a Kubernetes documentary coming. Looks like Part 1 is now online: cheers
Not really Kubernetes but.. came across this little utility on Twitter screenfetch.. cool
Hi Folks, There is a free Traefik academy availalble. Traefik does ingress and is used by default in K3S https://academy.traefik.io/
Hi Folks, Kasten on windows 2022 minikube https://kubesimplify.com/how-to-backup-kubernetes-with-kasten-community-edition
Hi Folks Kodekloud have announced a CKS challenge. You can win an expensive CKS exam voucher which is valid for 2 attempts at this difficult certificaiton: More details below:https://kodekloud.com/courses/cks-challenges/ Just a reminder you need to have already passed the CKA certification to get access to the CKS. cheers
Hi Everyone, I generally wake up in a good mood on Friday. Full of energy and ready to end the week and transfer myself in to relaxation mode. During these “feel good” moments I often find myself wondering about the “bigger” questions of life.This morning first thing I watched the weekly Veeam recap with @Madi.Cristil @MicoolPaul and @coolsport00 (notice both of the latter have “cool” in their usernames.. coincidence? I think not 😀). That got me thinking about the Veeam community and IT communities in general. I remembered what life was like before joining all of these great groups and came to the realisation that my IT communities, and especially the Veeam community, have become a very important part of my life. This has gone beyond the simple need for a technical source of information. IT community has added an enormous positive ingredient into my world. I now have friends and acquaintances that span the globe. Many I have never met in person and yet it feels as if they are like goo
My final Veeam Update. The aftermath! It did not take long for my swag to disappear. This time Alfred the Legend Cat and the Veeam Teddy bear I found with their new friend Carlos. Carlos is highly trained in DH, “Dealing with Humans” so he always opens his eyes slightly when people approach, just in case, the old trust but check thing :) If you look closely below in his den you will also see the Cloudian Ninja hanging out as well. Carlos
The NSA and CISA just released a Kubernetes Hardening guide. I have attached it here. cheers
Hi Everyone,All IT folks are secret hoarders. Come on admit it. I bet if we look in your basement we will find a ton of old computer equipment that is being kept “just in case”. I won’t even start about the cable jungle that grows down there. The older you get the more serious you become at your IT collection efforts. I recently scored an old Dell Chromebook that had been generously broken (i.e. put in developer mode in order to remove the dead ChromeOS and install Linux) by some developer (can’t remember if that is allowed or not so if need be I can provide the person’s address to the appropriate authorities while I play the victim.In fact this is allowed as they force you to press control L every time you want to boot in wild mode otherwise it goes and wipes the disk. However, I digress. Lets see what this power monster can do. I will pull out a terminal and inspect. Just to add the Linux Mate Desktop is installed which is quite lightweight and does not appear to be hogging resources
Hi FolksHere we go with special mentions @Rick Vanover @Madi.Cristil @JailBreak !
Hi Everyone,Recently I took an old powerful desktop and leveraged Proxmox in order to turn it into a cheap and non intrusive (furniture wise) virtual lab. My previous lab was an old but pretty powerful IBM Thinkpad. I was not using virtualisation just various flavours of Kubernetes on an Ubuntu 20.04 server OS. Old ThinkpadI had done quite a bit of work on my old lab despite its humble characteristics and I was also thinking about re-inventing this laptop with some mini Linux distribution or even FreeBSD. I had already setup a VBR server in my Proxmox setup with a Linux repository so I added my Thinkpad to a protection group, installed the agent and ran a full backup. This was easy enough and I believe has been covered here many times so I will jump to the BMR restore.I downloaded the Linux recovery media from Veeam and created a new empty VM in Proxmox and set it to boot from the ISONew VM After booting the VM I connected the console where I saw a message stating that if I was
Day 5 on a Monday, just to keep everyone on their toes!
This question comes from a suggestion from Community Hub superstar code named Member of Parliament? Who can that be? double clue in the code name. Dynamic Dan is keen to leverage new features in Veeam. At present he has 10 VBR servers over in 10 different locations all connected by the fast corporate VPN. For convenience sake he leverages Enterprise Manager to provide at a glance access to all of his VBR servers and RBAC capabilities. 2 weeks ago his company for the first time in 4 years acquired a new location and Dan was quick to install a new VBR server. However, when back at the head office he is having issues adding this VBR server to VEM. What could be the problem?
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
