Converting an existing Linux repo to hardened/immutable

[FrenchBlue]

Hello,

Everything is in the title or almost. Is there a way to convert an existing Linux repo to "hardened" with immutability? We could delete it in Veeam and then recreate it as hardened and import existing backups, but what about the backup chain? (backup copy chain in this case, it's a repo dedicated to remote backup copies).

Thanks.

[Mildur]

Hi FrenchBlue

Is your question about V11 or V12?
V11 is in our FAQ.
post402811.html#p402811

V12 requires some more step. But it doesn't matter if it's a backup or backup copy job chain.
I need to test the process first myself, before I can post it here.

Best,
Fabian

[FrenchBlue]

Hello,

Sorry I forgot to mention, it's V12 with the latest security patch.

Thanks.

[Mildur]

Thanks.
I have the steps ready for the new version of the FAQ. But I need to run a a small test first.
It involves adding a new hardened repository and change the jobs to use the new repository.

I will let you know the steps after my testing.

Best,
Fabian

[FrenchBlue]

Thanks. I can also be a tester if you want

[Mildur]

Hi Frenchblue

I have run the procedure in my lab. It creates active full backups.
I'll need to check the steps again with my colleague who created the guide.

Best,
Fabian

[Mildur]

Hi Frenchblue

Thank you for your patience.
To migrate your Linux Repository to a Hardened Repository, you can follow those steps in our user guide:
https://helpcenter.veeam.com/docs/backu ... repository

Best,
Fabian

[FrenchBlue]

Hello,

Thank you, I will try this and update the post.

[ilogsdon]

Thank you for the guide Frenchblue. I'm confused why veeam took away the simple immutability checkbox and made this process so ridiculously complicated. Especially since several Linux repos were converted to Hardened repos during our v12 upgrade so there is obviously a method the software uses to do it without having to manually reconfigure every sing job in the SOBR. Because only some of them were converted in the upgrade we now have several SOBRs with immutability only active on some of their repos. Veeam should restore our ability to toggle immutability or at least give us an easy one-way upgrade to hardened them since that is what happened automatically during the v12 upgrade.

[FrenchBlue]

Hello,

You should thank Fabian for the guide, not me
Yes, a bit complicated, I just finished the process and it works, but it was a bit tedious to edit manually more than a dozen jobs, plus some backups are not retained in the backup chain because the process asked to upgrade the corresponding jobs and only kept the last one in the backup chain. Others remain in "Imported backups" and are supposed to be purged according to expiration policy, we'll monitor this. But at least, it's possible, working and without data loss.

[hhls]

Unfortunately the instructions do not work for me. When I try to change the SSH connection to single-use credentials, I got the following error:

"Unable to set single-use credentials for Linux server HOSTNAME: the server has the transport service already installed."

I've tried to uninstall the transport service (regarding the instruction it is not required to remove), rescan repo server, rebooted repo server and VBR, same error.
Case # 07352231

[Mildur]

Thank you for the case number. Please continue with our customer support team to fix this issue.

Best,
Fabian