{"id":48540,"date":"2021-05-04T09:00:47","date_gmt":"2021-05-04T07:00:47","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=48540"},"modified":"2021-09-03T12:03:52","modified_gmt":"2021-09-03T10:03:52","slug":"veeam-v11-hardened-repository-immutability-pt-1","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/veeam-v11-hardened-repository-immutability-pt-1\/","title":{"rendered":"Veeam v11: Hardened Repository (Immutability) installation - pt.1"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter wp-image-50697 size-full\" title=\"veeam-v11-hardened-repository-immutability-01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-01.jpg\" alt=\"veeam-v11-hardened-repository-immutability-01\" width=\"602\" height=\"202\" \/><\/p>\n<p>The new\u00a0<a href=\"https:\/\/nolabnoparty.com\/en\/veeam-v11-whats-new-and-upgrade-procedure\/\">Veeam Backup &amp; Replication 11<\/a> provides the capability to have <strong>immutable backups<\/strong> leveraging Linux with the Hardened Repository.<\/p>\n<p>Already introduced in <a href=\"https:\/\/nolabnoparty.com\/en\/veeam-10-sneak-peek-cloud-tier-immutability\/\">Veeam v10<\/a> to store backups on <strong>Object Storage S3<\/strong> with <strong>Object Lock<\/strong> enabled, the Immutability feature <strong>protects your backups<\/strong> against overwriting, accidental deletion, ransomware attacks and internal intruders.<!--more--><\/p>\n<p>A <strong>good backup design<\/strong> is the key for a successful data protection strategy to avoid potential data loss that can affect the business. If data are not well protected, a ransomware attack could be a nightmare for administrators.<\/p>\n<p>&nbsp;<\/p>\n<h2>Blog Series<\/h2>\n<p>Veeam v11: Hardened Repository (Immutability) installation - pt.1<br \/>\n<a href=\"https:\/\/nolabnoparty.com\/en\/veeam-v11-hardened-repository-immutability-configuration-pt-2\/\">Veeam v11: Hardened Repository (Immutability) configuration - pt.2<\/a><br \/>\n<a href=\"https:\/\/nolabnoparty.com\/veeam-v11-hardened-repository-immutability-add-mfa-pt-3\/\">Veeam v11: Hardened Repository (Immutability) add MFA - pt.3<\/a><\/p>\n<p>&nbsp;<\/p>\n<h2>Requirements<\/h2>\n<p>To configure the Immutability for data backups, you need to meet some requirements:<\/p>\n<ul>\n<li>Veeam Backup &amp; Replication v11.<\/li>\n<li>Although the solution can run as virtual machine, a <strong>physical machine<\/strong> is strongly recommended for security concerns.<\/li>\n<li>A <strong>64bit Linux distribution<\/strong> to configure the repository. Suggested the Ubuntu 20.04 LTS or later distribution for <strong>highest quality of reflink<\/strong>, RHEL\/CentOS 8.2 or later, SLES 15 SP2 and Debian 10.<\/li>\n<li>The Linux Server <strong>should support XFS<\/strong> (enable the use of the Veeam fast cloning technology) and it is the recommended file system to use.<\/li>\n<\/ul>\n<p>Since backups cannot be modified due to Immutability, only <strong>forward incremental with periodic synthetic or active full<\/strong> backups are supported. For Backup Copy Jobs, NAS backup, log shipping, RMAN\/SAP HANA\/SAP on Oracle backups won't take advantage of the Immutability option but can be stored on the same repository.<\/p>\n<p><strong>Backup Copy Jobs<\/strong> configured with <strong>GFS retention policy<\/strong> will be able to use the Immutability feature.<\/p>\n<p>For Hardened Repository implementation, Veeam components only access the Linux Repository with <strong>non-root credentials<\/strong> and only <strong>port TCP 6162<\/strong> is required for the communication between Proxy and Repository (<strong>TCP 2500 to 3300<\/strong> are assigned when needed).<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50699\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-02-600x286.png\" alt=\"\" width=\"600\" height=\"286\" title=\"\"><\/p>\n<p>&nbsp;<\/p>\n<h2>Enforce security for Hardened Repository<\/h2>\n<p>To better protect backup data, you should follow some guidelines to enforce the security:<\/p>\n<ul>\n<li>Although persistent credentials can be used, is recommended the use of the new <strong>Single-use credentials for hardened repository<\/strong> during the deployment to <strong>avoid storing the credentials<\/strong> in Veeam Backup &amp; Replication.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50701\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-03-600x324.jpg\" alt=\"\" width=\"600\" height=\"324\" title=\"\"><\/p>\n<ul>\n<li><strong>SSH<\/strong> should be disabled<\/li>\n<li><strong>iDRAC, iLO<\/strong> or other remote management solutions to the repository should be disabled or hardened<\/li>\n<li>Time should be synced with a <strong>reliable NTP Server<\/strong> to avoid time changes from a potential attacker. Time changes could alter the Immutability retention.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>Install Ubuntu Server<\/h2>\n<p>For this procedure the Ubuntu Linux distribution is used to implement the Hardened Repository. Download the .ISO file for <a href=\"https:\/\/ubuntu.com\/download\/server\" target=\"_blank\" rel=\"noopener\">Ubuntu Server 20.04 LTS<\/a> then boot your machine to run the installation wizard.<\/p>\n<p>Select the <strong>language<\/strong> to use and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50703\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-04-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Specify the <strong>keyboard layout<\/strong> to use, select <strong>Done<\/strong>\u00a0then press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50705\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-05-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>By default the NIC is <strong>set to use DHCP<\/strong>. To assign a static IP address, select the NIC and press <strong>Enter<\/strong>. Select <strong>Edit IPv4<\/strong> from the available options. If your physical server provides two or more NICs, you can create a <strong>bond<\/strong> (teaming) to <strong>increase the available bandwidth<\/strong>.<\/p>\n<p>In the <strong>Network connections<\/strong> page, select <strong>Create bond<\/strong>\u00a0option.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50707\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-06-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Enter a <strong>Name<\/strong> and specify the <strong>Devices<\/strong> to use. As <strong>Bond mode<\/strong> select <strong>802.3ad<\/strong> from the drop-down menu then click <strong>Create<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50709\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-07-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Highlight the just created bond and press <strong>Enter<\/strong>. Select <strong>Edit IPv4<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50711\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-08-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Select <strong>Manual<\/strong> as <strong>IPv4 Method<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50713\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-09-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Fill all the requested information then select <strong>Save<\/strong>\u00a0and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50715\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-10-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>When the static IP address has been set, select <strong>Done<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50717\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-11-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>If you don't use a <strong>Proxy<\/strong>, select <strong>Done<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50719\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-12-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Leave default value, select <strong>Done<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50721\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-13-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Set <strong>Custom storage layout<\/strong> to create a custom partitions schema. Select <strong>Done<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50723\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-14-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>In this example, the storage in use has two local disks:<\/p>\n<ul>\n<li>One disk for the <strong>OS<\/strong><\/li>\n<li>One disk to <strong>store backups<\/strong><\/li>\n<\/ul>\n<p>Highlight the first disk <em>\/dev\/sda<\/em> and select <strong>Add GPT Partition<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50725\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-15-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Leave the <strong>Size<\/strong> field blank to use all the available space for the partition then select <strong>Format<\/strong> to specify the file system. In the example, the file system <strong>ext4<\/strong>\u00a0has been used. Select <strong>Create<\/strong> then press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50727\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-16-600x250.jpg\" alt=\"\" width=\"600\" height=\"250\" title=\"\"><\/p>\n<p>Now select the second local disk <em>\/dev\/sdb<\/em> and choose <strong>Add GPT Partition<\/strong>. Note there is a new <strong>bios_grub partition<\/strong> type in the first configured partition.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50729\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-17-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Leave the <strong>Size<\/strong> field blank and use <strong>xfs<\/strong> as <strong>Format<\/strong>\u00a0type. Create a custom <strong>Mount<\/strong> point (in the example <em>\/mnt\/veeamrepo<\/em>) and press <strong>Enter<\/strong> to confirm. XFS with Reflink works pretty the same way as ReFS to optimize performance and disk consumption (size of synthetic copies are smaller and the process faster). Veeam calls this technology <a href=\"https:\/\/helpcenter.veeam.com\/docs\/backup\/vsphere\/backup_repository_block_cloning.html?ver=110\" target=\"_blank\" rel=\"noopener\">Fast Clone<\/a>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50731\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-18-600x262.jpg\" alt=\"\" width=\"600\" height=\"262\" title=\"\"><\/p>\n<p>Once the partitions layout has been completed, select <strong>Done<\/strong> and press <strong>Enter<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50735\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-19-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Select <strong>Continue<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50737\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-20-600x230.jpg\" alt=\"\" width=\"600\" height=\"230\" title=\"\"><\/p>\n<p>Enter the <strong>Name<\/strong>, <strong>Server name<\/strong>, <strong>Username<\/strong> and <strong>Password<\/strong> the select <strong>Done<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50739\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-21-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>Select <strong>Install OpenSSH Server<\/strong> option to enable SSH. Select <strong>Done<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50741\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-22-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>No need to install additional features. Select <strong>Done<\/strong> then press <strong>Enter<\/strong>\u00a0to begin OS installation.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50743\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-23-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>The Linux OS is being installed in the system.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50745\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-24-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>When the installation has completed, select <strong>Reboot Now<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50747\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-25-600x444.jpg\" alt=\"\" width=\"600\" height=\"444\" title=\"\"><\/p>\n<p>&nbsp;<\/p>\n<h2>Configure the Repository<\/h2>\n<p>Login as the account configured during the OS installation (in the example <em>administrator<\/em>) and enter the password.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50749\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-26-600x386.jpg\" alt=\"\" width=\"600\" height=\"386\" title=\"\"><\/p>\n<p>To keep the system up to date, <strong>install latest upgrades<\/strong>\u00a0with the command:<\/p>\n<p><span style=\"color: #0000ff;\"># sudo apt-get upgrade<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50751\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-27-600x152.jpg\" alt=\"\" width=\"600\" height=\"152\" title=\"\"><\/p>\n<p>Check the <strong>file system in use<\/strong> for the partition that will be used by Veeam to store the backups. In the example, <em>\/mnt\/veeamrepo<\/em> is the dedicated partition formatted as <strong>xfs<\/strong>.<\/p>\n<p><span style=\"color: #0000ff;\"># df -Th<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50753\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-28-600x253.jpg\" alt=\"\" width=\"600\" height=\"253\" title=\"\"><\/p>\n<p>&nbsp;<\/p>\n<h4>Create a local account<\/h4>\n<p>You need to create a dedicated local user with the correct permissions so that the <strong>Veeam Transport Service<\/strong> has the correct rights to the Veeam mount.<\/p>\n<p>Create a <strong>new account<\/strong> used by Veeam and create the password.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo useradd locveeam --create-home -s \/bin\/bash<\/span><br \/>\n<span style=\"color: #0000ff;\"># sudo passwd locveeam<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50755\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-29-600x114.jpg\" alt=\"\" width=\"600\" height=\"114\" title=\"\"><\/p>\n<p>We need temporarily to allow the new user to <strong>execute commands as root<\/strong> to install the required Veeam services. The user is added to the <strong>sudo group<\/strong>.<\/p>\n<p><span style=\"color: #0000ff;\"># <span class=\"crayon-e\">sudo <\/span><span class=\"crayon-v\">usermod<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">a<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">G<\/span> <span class=\"crayon-e\">sudo <\/span><span class=\"crayon-v\">locveeam<\/span><\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50757\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-30-600x49.jpg\" alt=\"\" width=\"600\" height=\"49\" title=\"\"><\/p>\n<p>&nbsp;<\/p>\n<h4>Configure the mount point<\/h4>\n<p>If you want to take benefit of Fast-Clone technology (<strong>Fast Clone is based on the Reflink<\/strong>) to optimize space and performance during Synthetic Full operations,\u00a0by default <strong>Ubuntu doesn't enable Reflink<\/strong> when partition is formatted XFS during the installation procedure. Veeam requires the file system to be formatted with Reflink enabled to leverage Fast Clone capability.<\/p>\n<p>Access your hardened repository and retrieve the <strong>list of disks installed<\/strong> in Ubuntu to identify the disk used as repository.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo fdisk -l<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50759\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-31-600x370.jpg\" alt=\"\" width=\"600\" height=\"370\" title=\"\"><\/p>\n<p>Since the partition has been mounted during the installation procedure, we need first to <strong>unmount the partition<\/strong>.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo umount \/mnt\/veeamrepo<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50761\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-32-600x37.jpg\" alt=\"\" width=\"600\" height=\"37\" title=\"\"><\/p>\n<p>Once the partition has been unmounted, we need to <strong>format the partition<\/strong> with the parameters required by Veeam to leverage Fast-Clone technology: <strong>reflink and enable CRC<\/strong>.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo mkfs.xfs -b size=4096 -m reflink=1,crc=1 \/dev\/sdb -f<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50763\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-33-600x183.jpg\" alt=\"\" width=\"600\" height=\"183\" title=\"\"><\/p>\n<p>Since the UUID has changed due to this operation, we need to <strong>retrieve the new UUID<\/strong> and amend the <em>\/etc\/fstab<\/em> file to mount the partition automatically.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo blkid \/dev\/sdb<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50765\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-34-600x53.jpg\" alt=\"\" width=\"600\" height=\"53\" title=\"\"><\/p>\n<p>Update the <em>\/etc\/fstab<\/em>\u00a0file with the new UUID.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo vi \/etc\/fstab<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50767\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-35-600x179.jpg\" alt=\"\" width=\"600\" height=\"179\" title=\"\"><\/p>\n<p>Reload configured partitions.<\/p>\n<p><span style=\"color: #0000ff;\"># sudo mount -a<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50769\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-36-600x32.jpg\" alt=\"\" width=\"600\" height=\"32\" title=\"\"><\/p>\n<p>&nbsp;<\/p>\n<h4>Assign permissions to the mount point<\/h4>\n<p>Assign permissions to access the <em>\/mnt\/veeamrepo<\/em> folder to the <em>locveeam<\/em> account using the following commands:<\/p>\n<p><span style=\"color: #0000ff;\"># sudo chown -R locveeam:locveeam \/mnt\/veeamrepo\/<br \/>\n# sudo chmod 700 \/mnt\/veeamrepo<br \/>\n<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50771\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-37-600x50.jpg\" alt=\"\" width=\"600\" height=\"50\" title=\"\"><\/p>\n<p>Check the assigned permissions.<\/p>\n<p><span style=\"color: #0000ff;\"># ll \/mnt<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-50773\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/05\/veeam-v11-hardened-repository-immutability-38-600x95.jpg\" alt=\"\" width=\"600\" height=\"95\" title=\"\"><\/p>\n<p>The configuration of the physical Hardened Repository is now complete. <a href=\"https:\/\/nolabnoparty.com\/en\/veeam-v11-hardened-repository-immutability-configuration-pt-2\/\">Part 2<\/a> will cover the configuration of <a href=\"https:\/\/nolabnoparty.com\/en\/veeam-backup-for-microsoft-azure-configure-azure-pt-1\/\">Veeam Backup &amp; Replication<\/a> v11 to take benefit of the Immutability feature.<\/p>\n<p><img decoding=\"async\" title=\"signature\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"signature\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The new\u00a0Veeam Backup &amp; Replication 11 provides the capability to have immutable backups leveraging Linux with the Hardened Repository. Already introduced in Veeam v10 to store backups on Object Storage S3 with Object Lock enabled, the Immutability feature protects your backups against overwriting, accidental deletion, ransomware attacks and internal intruders.<\/p>\n","protected":false},"author":3,"featured_media":50697,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[2138,933],"tags":[579,2330,2297],"class_list":["post-48540","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backup-en","category-veeam-en","tag-backup-en","tag-hardened-repository","tag-immutability-en","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/48540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=48540"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/48540\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/50697"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=48540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=48540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=48540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}