Veeam Hardened Repository ISO - 2024

[jbalogh]

There was a new version demo'ed at VeeamON 2024. Any idea when this might be available? I am very much looking forward to it as I plan to deploy some hardened repositories soon.

Thank you

[Mildur]

Hi Justin

Thank you for your interest in the ISO. Unfortunately we cannot provide a ETA yet. Our team is still working on the new ISO.
If my latest information is still correct, then the ISO will get a Beta release first. But we cannot provide a date yet.

Best,
Fabian

[jbalogh]

Thank you for the quick response. I know the new one is based on Rocky and the older one is Ubuntu. If I have to deploy before the new is released is the Ubuntu still solid? I keep seeing it's based on LTS20, any chance to update it to 22 or 24?

[Mildur]

Our next major versions will keep supporting Ubuntu. There are no plans to remove support for Ubuntu.
Supported operating systems for Linux repositories: https://helpcenter.veeam.com/docs/backu ... repository

The old ISO we had provided in our community hub and our hardening script only supported Ubuntu 20.04 because there was no DISA-STIG for Ubuntu 22.04.
Since a few weeks DISA-STIG profiles got released for Ubuntu 22.04 as well. But it's not yet decided if we will update our hardening script for Ubuntu 22.04:
https://www.veeam.com/sys507

To answer your question:
You can deploy machines with Ubuntu 22.04/24.04 and use it as a hardened repository. It's fully supported.
But you need to take care of hardening yourself. Using the hardening script is not supported in Ubuntu 22.04.

Best,
Fabian

[dhossler]

+1 for interest. Thank you for providing an update even though there is no ETA at this time.

[tkolstad]

Yes, thank you for the update. I was at VEEAM ON and was looking forward to this dropping!

[HannesK]

Hello,
sorry for the delay (vacation...) thanks for asking. Yes, we will let you know once the new ISO is available as beta.

Technically the 20.04 is still supported by Ubuntu / Canonical. With the "repair" option (same functionality planned as for the old ISO) you will probably have an upgrade path to the new ISO (not tested yet, but should work).

Best regards,
Hannes

[RubinCompServ]

The old ISO we had provided in our community hub and our hardening script only supported Ubuntu 20.04 because there was no DISA-STIG for Ubuntu 22.04.
Since a few weeks DISA-STIG profiles got released for Ubuntu 22.04 as well.

@Mildur,

Do you have a reference for that? From here, it looks like only 16, 18, & 20 currently have STIGs.

Unrelated, it's also worth noting that it has to be Ubuntu Pro, not the free version.

[Mildur]

Ubuntu posted a blog article a few weeks ago:
https://ubuntu.com/blog/disa-stig-ubuntu-22-04-lts

But reading it now, they are still working on the profiles.

Best,
Fabian

Update:
The profile is available for Ubuntu 22.04 Pro since end of June 2024:
https://ubuntu.com/blog/disa-stig-ubuntu-22-04-usg

[stryker54141]

I am in the same boat the OP and would like to setup VHRs. Since the new ISO is not ready, is there any downside to deploying my repo (now) with 20.04 and running the hardening script?


Moderator Edit: The Rocky / Red Hat installation questions continue here

[VMG]

For those that are interested in Rocky 9 installation. HannesK made a step by step video.

You can find it here https://veeam.wistia.com/medias/ezcyrqn8pj.

One must still read his link https://www.veeam.com/blog/install-disa ... itory.html
There one will find more commands regarding the settings for Hardening the Linux OS.

[flow90]

Hey,

Do you have any timeline for availability about VHR ISO ?

[Gostev]

Next month!

[Adrian1980]

Hello, where I can find the Beta download?

[Gostev]

Here > [PREVIEW] Hardened Repository ISO managed by Veeam

[VMG]

For those that are interested. Rocky 9.4 instructions with 2 videos were uploaded in the following forum. THIS IS NOT A BETA.

veeam-backup-replication-f2/rocky-linux ... ml#p526563

I installed it 2 weeks ago and it is working fine. If you have any questions about the videos, you can post it on the above forum for Rocky.

[kevincsf]

Hello, the production version of the ISO has been released, i've just seen it today (Dec 10, 2024) on MyVeeam account.
It's been release on Oct 28, 2024, Version 0.1.17.

Not tried yet because i've already have a Linux Hardened Repo that i've installed from scratch (Ubuntu LTS 22.0).

[Mildur]

Yes, it‘s out for a few weeks now:

[RELEASE] Managed Hardened Repository ISO by Veeam

Best,
Fabian