Standalone backup agents for Linux and Unix workloads on-premises or in the public cloud
Post Reply
neatusername
Novice
Posts: 5
Liked: never
Joined: Feb 10, 2020 10:01 pm
Full Name: John Smith
Contact:

Unable to backup LUKS encrypted system (Case: 03997114)

Post by neatusername »

(Case: 03997114)

I recently started using an encrypted HDD for my new Fedora 30 setup, I'm able to install Veeam linux client and perform Entire Machine backup successfully, however the created backup is about a quarter of the backup size expected. My home, root, and swap partitions are all LUKS encrypted.

Versions:
veeam-3.0.2.1185-1.fc24.x86_64.rpm
veeamsnap-3.0.2.1185-1.noarch.rpm

Of course, when I attempt to restore from the backup, Veeam USB linux software informs me that there is nothing to restore from the 3 LUKS devices. (“No partition table is present on device”)

Since the backup size is a 4th of the expected size, I believe this is an issue in the veeam linux client that creates the backup.

HannesK
Veeam Software
Posts: 5882
Liked: 810 times
Joined: Sep 01, 2014 11:46 am
Location: Austria
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by HannesK »

Hello,
and welcome to the forums. Please understand that the forum does not replace support (it's not a support forum)

I see that your case does not contain logfiles. So support will probably not be able to help you.

As there were some known issues with LUKS in version 3, I suggest to ask support for the download of version 4 (it's not on the public website yet).

Best regards,
Hannes

neatusername
Novice
Posts: 5
Liked: never
Joined: Feb 10, 2020 10:01 pm
Full Name: John Smith
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by neatusername »

Hi Hannes,

Thank you. I provided support with the log files, and requested version 4 as you suggested.

neatusername
Novice
Posts: 5
Liked: never
Joined: Feb 10, 2020 10:01 pm
Full Name: John Smith
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by neatusername »

Update:
Test version 4 continues to produce the issue. Backups are successfully created, however when attempting to restore the backup upon selecting any of the luks devices, an error message appear "No partition table is present on device."

Tested on:
rpmveeam-4.0.0.1947-1.fc24.x86_64.rpm
veeamsnap-4.0.0.1947-1.noarch.rpm
veeam-recovery-media-4.0.0.1947.iso

HannesK
Veeam Software
Posts: 5882
Liked: 810 times
Joined: Sep 01, 2014 11:46 am
Location: Austria
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by HannesK »

I just checked the case, but I see no logs for VAL 4.0 - did you upload them?

neatusername
Novice
Posts: 5
Liked: never
Joined: Feb 10, 2020 10:01 pm
Full Name: John Smith
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by neatusername »

I can't grablogs in VAL 4.0:
Unknown argument: [grablogs].

Is there a way to get logs other than the old way of 'sudo veeamconfig config grablogs'?

HannesK
Veeam Software
Posts: 5882
Liked: 810 times
Joined: Sep 01, 2014 11:46 am
Location: Austria
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by HannesK »


MiMaMo
Novice
Posts: 5
Liked: 4 times
Joined: Feb 27, 2020 3:04 pm
Full Name: Michael
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by MiMaMo »

Nice Topic!

I am very interessted in Backup and Restore a LUKS encrypted systems also.
This is a scenario which will be common in the future on "real" linux notebooks for example.

Till now I will backup and restore an encrypted partition with "partclone" described like here: https://www.errietta.me/blog/luks-clonezilla/
This works but it will be nice if Veeam supports a similar way out of the box. :-)

neatusername
Novice
Posts: 5
Liked: never
Joined: Feb 10, 2020 10:01 pm
Full Name: John Smith
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by neatusername »

Added VAL 4.0 logs to ticket! Thanks Hannes.

HannesK
Veeam Software
Posts: 5882
Liked: 810 times
Joined: Sep 01, 2014 11:46 am
Location: Austria
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by HannesK »

@MiMaMo: do you see any problems backing up with Veeam Agent for Linux? It should work.

@neatusername: Thanks! I need to check how to proceed as you have a free license according to the case information.

MiMaMo
Novice
Posts: 5
Liked: 4 times
Joined: Feb 27, 2020 3:04 pm
Full Name: Michael
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by MiMaMo »

@HannesK: I will try it in a few days and report back. I just need time for my new setup. :-)

MiMaMo
Novice
Posts: 5
Liked: 4 times
Joined: Feb 27, 2020 3:04 pm
Full Name: Michael
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by MiMaMo »

So, I just have some news:
- I installed Ubuntu 20.04 in parallel on a Windows 10 Notebook (with LUKS encrypted partitions which are then managed by LVM and a root partition with ext4 to keep things simple)
- I was able to create a backup ("full backup" works fine also a "volume backup")
- I created the recovery ISO
- booting from the recovery ISO and trying to restore something leads me to the issue, that the recovery ISO is not able to mount/decrypt LUKS2-encrypted partitions. Only LUKS1.

Gladly it seems that there is a way to convert LUKS2-Volumes to LUKS1-volumes. I need a few additional days to dig around and will report back.

PTide
Product Manager
Posts: 5585
Liked: 533 times
Joined: May 19, 2015 1:46 pm
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by PTide »

Hi,

Right, the current recovery ISO kernel does not support LUKS2, but we are already working on the updated version.

Thanks!

MiMaMo
Novice
Posts: 5
Liked: 4 times
Joined: Feb 27, 2020 3:04 pm
Full Name: Michael
Contact:

Re: Unable to backup LUKS encrypted system (Case: 03997114)

Post by MiMaMo »

Converting the LUKS2-Partition to LUKS1 did not change the behaviour from the recovery media (unable to decrypt the volume).
So I will wait for the new recovery ISO for further tests.

@PTide: Thank you very much for mentioning that you are working on a more actual recovery media. :-)

Post Reply

Who is online

Users browsing this forum: No registered users and 10 guests