Immutability in OCI S3 bucket

[Andanet]

Hi everyone,
I'm writing because I've got a few doubts about using an S3 bucket as the capacity tier in OCI.
Right now, I've got a bunch of Linux agents and RMAN plug-in that writes into a Linux hardened repository (not a VeeamISO). The client asked me to set up a new repository where the GFS backup policy would be stored in an OCI bucket (no data could leave OCI). But I read in the Oracle documentation (https://docs.oracle.com/en-us/iaas/Cont ... nrules.htm) that I can't use Veeam immutability because OCI doesn't support API Object Lock.
I can only use OCI Retention Rules for bucket-level immutability, but these require suspended versioning. This is not compatible with the AWS S3 Object Lock API, which Veeam uses to enable the immutability option in the repository wizard.

Do you have any more info about this scenario?
Thanks

[Mildur]

Hi Antonio

I can only use OCI Retention Rules for bucket-level immutability, but these require suspended versioning.

Using retention rules/policies on Object Storage is not supported by Veeam, as they can lead to backup and restore issues.

Object Lock is currently not supported by Oracle through their S3 API, and there is no ETA for when it will be implemented by Oracle.
If immutability is a requirement today, please consider alternative object storage providers that offer full support for S3 Object Lock.

Best,
Fabian

[Andanet]

Hi Fabian,
thanks for your reply. just a simple question, if I try to use S3 without Veeam immutability, hhere may still be same issues?
Thanks

[sfirmes]

Antonio, we don't support lifecycle rules managing buckets/objects created by VBR (immutability enabled or not). The following statements are from our Veeam Help Center's VBR v113 User Guide :

• "Data in an object storage bucket or container must be managed solely by Veeam Backup & Replication, including retention and data management."
• "Note that enabling lifecycle rules is not supported and may result in backup and restore failures."

Hope this helps.

[Andanet]

Perfect. Thanks for your answer Steve.
You removed all my doubts

[sfirmes]

Glad to help Antonio. I am actively working with OCI and will update you with any immutability updates I get from them. The latest is immutability via s3 api object-locking is on their roadmap, but they don't have a timeframe for if/when it will be delivered.