[V13] Initial feedback on the Managed Hardened Repository ISO

[schewee]

Downloaded the ISO and took it for a spin in my homelab. I was able to install the Appliance using the ISO into a VM in Proxmox with the following specs:

- 4vCPUs
- 8GB RAM
- 256GB SSD (SATA0, virtual disk)
- 2x256GB HHDs (SATA1-2, virtual disk)
- UEFI/TPM/yadda

I realize homelabs aren't your target demo so feel free to ignore

Initial feedback:

- Some kind of disk configuration wizard during the OS installation would be ideal. I'm fairly certain the OS was correctly installed on SATA0 but it appears SATA1/2 were turned into a LVM RAID0. My backup server, where I would install this later, has 1xNVMe and 5xHDDs in it and I would rather those HDDs be a RAID10/5/6 over a RAID0.
-- To add to this, I cannot delete/recreate the repo via the WebUI as it's the last (only) repo on the host
-- I suspect I can get into the CLI via SSH and futz with all this?
- Logging in via the Windows Console did not prompt me for MFA like the WebUI does
- Might be worth noting in the WebUI under Managed Servers -> Add Server -> Virtualization Platforms: "To add Promox/Nutanix AVH hosts please install the Windows Console". I originally thought Proxmox had been dumped before checking the Windows Console

Other than that everything appears to be up and running. I have not tried to run a backup yet but I can't imagine that won't work. I figured the biggest hurdle would be installation on non-Enterprise hardware.

Once I know more about how to re-configure disks I'll probably install this on my backup server. Once less Windows installation in my homelab

[HannesK]

Hello,
thanks for the feedback.

disk configuration: to get disk configuration DISA STIG compliant is a complex topic. To "feel the pain", I recommend to try to install Rocky Linux with DISA STIG profile manually. The other disks are a striped logical volume, yes. We expect that all volumes presented to the ISO are a RAID. The system is not built for "plain disks".

adding repo / web UI: the web UI is a "preview". Adding a new repo and then deleting the old should work (I did not test), but even if not, then it's a matter of time to fix that. For everything not working right now, the windows console is the way to go

SSH: yes you can

MFA: good catch, yes. We are aware and thinking about how to align that. Right now the solution is to enable MFA for veeamadmin in the Users & Roles. However, we recommend strongly against using host admin for day-to-day VBR management operations (this is also documented in What's New).

hardware: yes, we expect VMs or "datacenter grade" hardware (aka hardware RAID controller, all hardware on Red Hat Hardware Compatibility List)

Best regards
Hannes