Hardening Linux repository OS version

[bwright97]

I've been doing some googling on the OS requirements for the hardened linux repository. I see suggestions like Ubuntu 20.04 LTS, RHEL/CentOS 8.2 or later, SLES 15 SP2 and Debian 10, but I'm wondering if FC34 or 35 would work. I'm a Windows guy, and a noob with Linux, hence probably the noob question.
Thanks!

[chris.childerhose]

If you need to know this link shows you what is supported including those that support XFS as well - https://helpcenter.veeam.com/docs/backu ... r=110#repo

I know Ubuntu was one of the more recommended OS versions to use for the hardened repository and is what we use.

[micoolpaul]

There's absolutely nothing to stop you from using Fedora. To sound like a self-promoter here, I blogged about this:
http://micoolpaul.com/2021/12/21/veeam- ... e-in-2022/

In essence, Fedora isn't the best candidate due to its limited lifecycle, at present Fedora 34 and 35 are supported, but Fedora 34 is end of support in under a month, whilst Fedora 35 is end of support before end of year. Whilst Fedora 36 isn't out yet (due next month). Once Fedora 36 is available, then Veeam still need to introduce support for this.

Fedora's lifecycle is generally around 13 months, so you'd be upgrading the OS every 6 months to maintain support (6 months + Veeam validation testing time), more info: https://docs.fedoraproject.org/en-US/re ... lifecycle/

If you want to use something like Fedora you'd be better off using RHEL as it's the downstream, enterprise supported version. Or alternatively another project such as Ubuntu, it has an LTS version with many years of support. This ties in better to any hardware purchase lifecycles. You don't want a high security requirement platform such as a hardened linux repository undergoing fundamental OS changes every 6 months with Fedora...

[bwright97]

Thank you both for your comments, it's really appreciated.

[albertwt]

Hi folks,

What are Veeam-supported or tested hardened (immutable) Linux backup repository options?

From this page: https://bp.veeam.com/vbr/2_Design_Struc ... sitories/ there is no mention of a specific Linux Distro.

In this case, I assume that Veeam does not control or limit the Linux OS maintenance guidelines for updates or security patches.

I would greatly appreciate any suggestions you may have.

[HannesK]

Hello,

there is no mention of a specific Linux Distro.

that is, because the system requirements apply.

I would use a distribution that is supported for XFS fastclone.

If you have no plan about Linux, then I would go for Ubuntu, because it's documented well (any search engine, youtube, forum search, community forums will give tons of answers on how to install it)

Best regards,
Hannes

[albertwt]

That's great, thanks @HannesK,
I'll go with Ubuntu Server now.

[trackstar]

Revisiting this top. Thinking out loud, so a Linux machine serving NFS. From Veeam backup repository select DAS (Linux Hardening (Hardened Repository)), and path to the share on the Linux?

[HannesK]

Hello,
I don't understand what NFS has do to with Hardened Repository, but going with DAS (direct attached block storage) is good

Best regards
Hannes