Discussions related to using object storage as a backup target.
Post Reply
NorthGuard
Service Provider
Posts: 108
Liked: 8 times
Joined: Jan 19, 2022 4:48 pm
Contact:

MinIO Immutability Setup

Post by NorthGuard »

I am setting up Minio as a s3 compatible immutable repo for Veeam v12 and have run into an issue. When I go to add the bucket in Veeam and tick the option for immutability, I get a message:

selected object storage does not support s3 object lock feature

I am guessing it maybe has something to do with either the underlying file structure ( which is xfs ) or how I create the bucket?

I create the bucket the web gui with the following options:

Bucket Name: bucket01
Object Locking: Enabled - this also auto-enabled Versioning without any other settings

Then I create the bucket.

Any thoughts on what I am missing?
tyler.jurgens
Veeam Software
Posts: 425
Liked: 251 times
Joined: Apr 11, 2023 1:18 pm
Full Name: Tyler Jurgens
Contact:

Re: MinIO Immutability Setup

Post by tyler.jurgens »

What version of Minio are you trying?
I've done this multiple times. Provided you have the correct access policy and your bucket is created as you say, it should work just fine.
Tyler Jurgens
Blog: https://explosive.cloud
Twitter: @Tyler_Jurgens BlueSky: @explosive.cloud
sfirmes
Veeam Software
Posts: 321
Liked: 150 times
Joined: Jul 24, 2018 8:38 pm
Full Name: Stephen Firmes
Contact:

Re: MinIO Immutability Setup

Post by sfirmes »

@NorthGuard have you tried creating the bucket from the aws cli? I've seen many times that the vendor's gui will sometimes add information to the bucket that we can't use. I wrote a blog post about this topic and hopefully it might help you.
Steve Firmes | Senior Solutions Architect, Product Management - Alliances @ Veeam Software
NorthGuard
Service Provider
Posts: 108
Liked: 8 times
Joined: Jan 19, 2022 4:48 pm
Contact:

Re: MinIO Immutability Setup

Post by NorthGuard »

I have not tried using a CLI as the gui appeared to be much more straight foward.
NorthGuard
Service Provider
Posts: 108
Liked: 8 times
Joined: Jan 19, 2022 4:48 pm
Contact:

Re: MinIO Immutability Setup

Post by NorthGuard »

Is there anyone using minio, immutability, and Veeam?
tyler.jurgens
Veeam Software
Posts: 425
Liked: 251 times
Joined: Apr 11, 2023 1:18 pm
Full Name: Tyler Jurgens
Contact:

Re: MinIO Immutability Setup

Post by tyler.jurgens »

tjurgens-s2d wrote: Aug 16, 2023 9:56 pm What version of Minio are you trying?
I've done this multiple times. Provided you have the correct access policy and your bucket is created as you say, it should work just fine.
Many times.
Tyler Jurgens
Blog: https://explosive.cloud
Twitter: @Tyler_Jurgens BlueSky: @explosive.cloud
NorthGuard
Service Provider
Posts: 108
Liked: 8 times
Joined: Jan 19, 2022 4:48 pm
Contact:

Re: MinIO Immutability Setup

Post by NorthGuard »

I totally missed your post tjurgens!

Version is: minio_20230816201730.0.0_amd64.deb
Running on Ubuntu 22.04
Drive that houses buckets is formatted as xfs

Bucket is configured as stated above.

Policy looks like this:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "BucketAccessForUser",
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:PutObject",
"s3:DeleteObject",
"s3:GetObject"
],
"Resource": [
"arn:aws:s3:::bucket01",
"arn:aws:s3:::bucket01/*"
]
}
]
}
NorthGuard
Service Provider
Posts: 108
Liked: 8 times
Joined: Jan 19, 2022 4:48 pm
Contact:

Re: MinIO Immutability Setup

Post by NorthGuard »

UPDATE:

I changed the policy to this and it seems to be working now!

{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:ListAllMyBuckets",
"Resource": "arn:aws:s3:::*"
},
{
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::bucket01",
"arn:aws:s3:::bucket01/*"
]
}
]
}
tyler.jurgens
Veeam Software
Posts: 425
Liked: 251 times
Joined: Apr 11, 2023 1:18 pm
Full Name: Tyler Jurgens
Contact:

Re: MinIO Immutability Setup

Post by tyler.jurgens »

If you want to be specific about the permissions you provide to your buckets, I suggest following this KB: https://www.veeam.com/kb3151
You missed a few in your original policy.
Tyler Jurgens
Blog: https://explosive.cloud
Twitter: @Tyler_Jurgens BlueSky: @explosive.cloud
Post Reply

Who is online

Users browsing this forum: No registered users and 15 guests