Unable to backup LUKS encrypted system (Case: 03997114)

[neatusername]

(Case: 03997114)

I recently started using an encrypted HDD for my new Fedora 30 setup, I'm able to install Veeam linux client and perform Entire Machine backup successfully, however the created backup is about a quarter of the backup size expected. My home, root, and swap partitions are all LUKS encrypted.

Versions:
veeam-3.0.2.1185-1.fc24.x86_64.rpm
veeamsnap-3.0.2.1185-1.noarch.rpm

Of course, when I attempt to restore from the backup, Veeam USB linux software informs me that there is nothing to restore from the 3 LUKS devices. (“No partition table is present on device”)

Since the backup size is a 4th of the expected size, I believe this is an issue in the veeam linux client that creates the backup.

[HannesK]

Hello,
and welcome to the forums. Please understand that the forum does not replace support (it's not a support forum)

I see that your case does not contain logfiles. So support will probably not be able to help you.

As there were some known issues with LUKS in version 3, I suggest to ask support for the download of version 4 (it's not on the public website yet).

Best regards,
Hannes

[neatusername]

Hi Hannes,

Thank you. I provided support with the log files, and requested version 4 as you suggested.

[neatusername]

Update:
Test version 4 continues to produce the issue. Backups are successfully created, however when attempting to restore the backup upon selecting any of the luks devices, an error message appear "No partition table is present on device."

Tested on:
rpmveeam-4.0.0.1947-1.fc24.x86_64.rpm
veeamsnap-4.0.0.1947-1.noarch.rpm
veeam-recovery-media-4.0.0.1947.iso

[HannesK]

I just checked the case, but I see no logs for VAL 4.0 - did you upload them?

[neatusername]

I can't grablogs in VAL 4.0:
Unknown argument: [grablogs].

Is there a way to get logs other than the old way of 'sudo veeamconfig config grablogs'?

[HannesK]

yep, without "config" https://helpcenter.veeam.com/docs/agent ... tml?ver=40

[MiMaMo]

Nice Topic!

I am very interessted in Backup and Restore a LUKS encrypted systems also.
This is a scenario which will be common in the future on "real" linux notebooks for example.

Till now I will backup and restore an encrypted partition with "partclone" described like here: https://www.errietta.me/blog/luks-clonezilla/
This works but it will be nice if Veeam supports a similar way out of the box.

[neatusername]

Added VAL 4.0 logs to ticket! Thanks Hannes.

[HannesK]

@MiMaMo: do you see any problems backing up with Veeam Agent for Linux? It should work.

@neatusername: Thanks! I need to check how to proceed as you have a free license according to the case information.

[MiMaMo]

@HannesK: I will try it in a few days and report back. I just need time for my new setup.

[MiMaMo]

So, I just have some news:
- I installed Ubuntu 20.04 in parallel on a Windows 10 Notebook (with LUKS encrypted partitions which are then managed by LVM and a root partition with ext4 to keep things simple)
- I was able to create a backup ("full backup" works fine also a "volume backup")
- I created the recovery ISO
- booting from the recovery ISO and trying to restore something leads me to the issue, that the recovery ISO is not able to mount/decrypt LUKS2-encrypted partitions. Only LUKS1.

Gladly it seems that there is a way to convert LUKS2-Volumes to LUKS1-volumes. I need a few additional days to dig around and will report back.

[PTide]

Hi,

Right, the current recovery ISO kernel does not support LUKS2, but we are already working on the updated version.

Thanks!

[MiMaMo]

Converting the LUKS2-Partition to LUKS1 did not change the behaviour from the recovery media (unable to decrypt the volume).
So I will wait for the new recovery ISO for further tests.

@PTide: Thank you very much for mentioning that you are working on a more actual recovery media.

[freeseacher_]

any updates on this ?

[PTide]

@freeseacher_,

Yes, we have an updated Recovery Media at Beta stage, also a lot of work has been done in VAL 5.0 (also Beta). Kindly reach out to your sales representative so that they can provide you with the latest beta. If you don't know who your sales rep. is, then please shoot me a PM.

Thanks!