{"id":64801,"date":"2025-03-04T09:00:21","date_gmt":"2025-03-04T08:00:21","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=64801"},"modified":"2025-03-04T09:25:11","modified_gmt":"2025-03-04T08:25:11","slug":"veeam-hardened-repository-iso-test-backup-pt-3","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/veeam-hardened-repository-iso-test-backup-pt-3\/","title":{"rendered":"Veeam Hardened Repository ISO test backup - pt.3"},"content":{"rendered":"

\"veeam-hardened-repository-iso-test-backup-01\"<\/p>\n

Once the installation and configuration of the Veeam Hardened Repository<\/a> ISO are complete, it's time to test if everything works as expected<\/strong>.<\/p>\n

To validate the new installation, we need to configure the repository in Veeam<\/strong> and create a Backup Job.<\/p>\n

<\/p>\n

 <\/p>\n

Blog series<\/h2>\n

Veeam Hardened Repository ISO installation - pt.1<\/a>
\nVeeam Hardened Repository ISO configuration - pt.2<\/a>
\nVeeam Hardened Repository ISO test backup - pt.3<\/p>\n

 <\/p>\n

Add the Hardened Repository in Veeam<\/h2>\n

Login to Veeam console to proceed with the repository configuration.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Add the Linux server in Veeam<\/h4>\n

Go to Managed Servers<\/strong> area, right click anywhere in the right pane and select Add server<\/strong>.<\/p>\n

\"\"<\/p>\n

Select Linux<\/strong>.<\/p>\n

\"\"<\/p>\n

Enter the DNS name or IP address<\/strong> and optionally a Description<\/strong>. Click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Click Add<\/strong> and select Single-use credentials for hardened repository<\/strong>.<\/p>\n

\"\"<\/p>\n

Enter Username<\/strong> and Password<\/strong> previously created during the configuration of the Veeam Hardened Repository ISO (step Start SSH<\/em>) and click OK<\/strong>.<\/p>\n

\"\"<\/p>\n

Select the Credentials<\/strong> just created and click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Click Yes<\/strong> to trust this server.<\/p>\n

\"\"<\/p>\n

Click Apply<\/strong> to install the required components.<\/p>\n

\"\"<\/p>\n

Once the required components are installed, click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Click Finish<\/strong>.<\/p>\n

\"\"<\/p>\n

The configured Linux server.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Add the new Hardened Repository<\/h4>\n

Go to Backup Repositories<\/strong> area, right click anywhere in the right pane and select Add backup repository<\/strong>.<\/p>\n

\"\"<\/p>\n

Select Direct attached storage<\/strong> option.<\/p>\n

\"\"<\/p>\n

Select Linux (Hardened Repository)<\/strong>.<\/p>\n

\"\"<\/p>\n

Specify the Name<\/strong> and optionally a Description<\/strong> then click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Select the Repository server<\/strong> and click Populate<\/strong>. Choose the Path<\/strong> to store the backups and click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Ensure that the Use fast cloning on XFS volumes<\/strong> option is enabled, and specify the immutability retention period in the Make recent backups immutable<\/strong> field. Then click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

The system checks if fast clone requirements<\/strong> are met. When using the Veeam Hardened Repository<\/a> ISO no additional action is needed on the XFS volume as it is automatically formatted <\/strong>to meet the fast clone requirements.<\/p>\n

\"\"<\/p>\n

Specify the Mount server<\/strong> and click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Click Apply<\/strong> to finalize the repository configuration.<\/p>\n

\"\"<\/p>\n

The Hardened Repository is configured and saved in Veeam. Click Next<\/strong>.<\/p>\n

\"\"<\/p>\n

Click Finish<\/strong>.<\/p>\n

\"\"<\/p>\n

The created Hardened Repository.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Disable SSH in the Hardened Repository<\/h2>\n

When the configuration in Veeam is complete, you need to disable SSH on the Hardened Repository to secure access. In this step, the SSH service will be disabled<\/strong>\u00a0and the user used by Veeam to connect to the repository will be removed from the sudo group<\/strong>. Access the console and select Stop SSH<\/strong>.<\/p>\n

\"\"<\/p>\n

Click Yes<\/strong>.<\/p>\n

\"\"<\/p>\n

Click OK<\/strong>.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Create a Backup Job to test the repository<\/h2>\n

To test if the Veeam Hardened Repository ISO works as expected, create a new Backup Job<\/strong> and select the newly configured Hardened Repository<\/strong> as the Backup repository<\/strong>. Specify the Retention policy<\/strong>\u00a0ensuring it is equal to or greater than the value set for immutability retention<\/strong>, then complete the Backup Job creation.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Run the Backup Job<\/h4>\n

Run the Backup Job to create a new backup<\/strong> in the Hardened Repository.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Test the immutability<\/h4>\n

Go to Backups > Disk<\/strong>, select a VM that was previously included in the Backup Job, and choose Delete from disk<\/strong> to remove the selected VM backup.<\/p>\n

\"\"<\/p>\n

Click Yes<\/strong> to confirm.<\/p>\n

\"\"<\/p>\n

As expected, the deletion operation fails<\/strong> because the backup is immutable. The Hardened Repository works as expected<\/strong>.<\/p>\n

\"\"<\/p>\n

The Veeam Hardened Repository ISO is an excellent solution that simplifies the installation<\/strong> of a Hardened Repository by leveraging the hardening configuration provided by the ISO, securing the operating system in accordance with the DISA STIG<\/a>.<\/p>\n

The Veeam Hardened Repository ISO can be downloaded for free from the Veeam website<\/a>.<\/p>\n

\"signature\"<\/p>\n","protected":false},"excerpt":{"rendered":"

Once the installation and configuration of the Veeam Hardened Repository ISO are complete, it's time to test if everything works as expected. To validate the new installation, we need to configure the repository in Veeam and create a Backup Job.<\/p>\n","protected":false},"author":3,"featured_media":64912,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[2138,933],"tags":[579,2330,2950],"class_list":["post-64801","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backup-en","category-veeam-en","tag-backup-en","tag-hardened-repository","tag-iso","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/64801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=64801"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/64801\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/64912"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=64801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=64801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=64801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}