{"id":65634,"date":"2025-04-03T09:00:04","date_gmt":"2025-04-03T07:00:04","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=65634"},"modified":"2025-12-17T14:25:55","modified_gmt":"2025-12-17T13:25:55","slug":"configure-a-nakivo-hardened-repository","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/configure-a-nakivo-hardened-repository\/","title":{"rendered":"Configure a Nakivo Hardened Repository"},"content":{"rendered":"

\"nakivo-hardened-repository-configuration-01\"<\/p>\n

To protect backup data from overwrites, deletions, and modifications, you must make the backups immutable<\/strong> by saving them to a Nakivo Hardened Repository<\/a>.<\/p>\n

Nakivo Backup & Replication<\/a> supports immutability and allows administrators to configure Hardened Repositories without relying on commercial storage solutions<\/a> only.<\/p>\n

<\/p>\n

 <\/p>\n

Configure a Nakivo Hardened Repository<\/h2>\n

To make your backups immutable, you need to install a file system that supports XFS<\/strong>. Linux provides the XFS file system and the distribution you use must be supported by the Nakivo Transporter<\/a>.<\/p>\n

 <\/p>\n

Install the OS Linux<\/h4>\n

In this example, the Linux Ubuntu Server LTSC 22.04<\/strong> is used as the operating system.<\/p>\n

Install the OS and make sure to create an XFS partition<\/strong> where backups will be stored to leverage the immutability capability.<\/p>\n

# df -Th<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-02\"<\/p>\n

 <\/p>\n

Deploy the Transporter to the Hardened Repository<\/h4>\n

Once the OS installation is completed, download from Nakivo website the Linux installer<\/a>. Using a tool like WinSCP, copy the installer to the Linux machine to configure.<\/p>\n

\"nakivo-hardened-repository-configuration-03\"<\/p>\n

Add the permissions<\/strong> to execute the file.<\/p>\n

# chmod +x .\/NAKIVO_Backup_Replication_v11.0.2.91392_Installer-TRIAL.sh<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-04\"<\/p>\n

Run the installer and choose the desired language (1 English<\/strong> in the example).<\/p>\n

# sudo .\/NAKIVO_Backup_Replication_v11.0.2.91392_Installer-TRIAL.sh<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-05\"<\/p>\n

The installation begins by showing the EULA.<\/p>\n

\"nakivo-hardened-repository-configuration-06\"<\/p>\n

Scroll the EULA till the end and type 1<\/strong> to accept the license agreement then the option 3<\/strong> to install the Transporter.<\/p>\n

\"nakivo-hardened-repository-configuration-07\"<\/p>\n

Specify the location to install<\/strong> the Transporter (default \/opt\/nakivo<\/em>) and press Enter<\/strong>. Enter the master password<\/strong> used to connect the Nakivo Server. Type 1<\/strong> to skip the custom certificate<\/strong> installation and press Enter<\/strong>.<\/p>\n

\"nakivo-hardened-repository-configuration-08\"<\/p>\n

The Transporter has been installed successfully.<\/p>\n

\"nakivo-hardened-repository-configuration-09\"<\/p>\n

Check the Transporter service status<\/strong> with the command:<\/p>\n

# systemctl status nkv-bhsvc<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-10\"<\/p>\n

Create the folder for the repository.<\/p>\n

# sudo mkdir \/opt\/nakivo\/repository<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-11\"<\/p>\n

 <\/p>\n

Apply required permissions<\/h4>\n

Apply the required permissions<\/strong> to the folder. You must grant the required permissions to bhsvc<\/strong> account.<\/p>\n

# sudo chown -R bhsvc:bhsvc \/opt\/nakivo\/repository<\/span>
\n# sudo chmod -R 770 \/opt\/nakivo\/repository<\/span><\/p>\n

\"\"<\/p>\n

Check the applied permissions.<\/p>\n

# ll<\/span><\/p>\n

\"\"<\/p>\n

 <\/p>\n

Adjust the required mount point<\/h4>\n

Nakivo can add the repository to the server if the folder is created in \/opt\/nakivo<\/em>. However, if you specified a different location during the OS installation, some adjustments<\/strong> will be required.<\/p>\n

Identify the disk that will be used for the repository.<\/p>\n

# sudo fdisk -l<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-14\"<\/p>\n

Unmount the current partition.<\/p>\n

# sudo umount \/mnt\/nakivorepo<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-15\"<\/p>\n

Mount the partition to the created folder.<\/p>\n

# sudo mount \/dev\/sdb1 \/opt\/nakivo\/repository<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-16\"<\/p>\n

To make the mount persistent<\/strong>, you need to edit the \/etc\/fstab<\/em> file to modify the partition path<\/strong>. Change the mount point with the correct path<\/strong> and save the configuration.<\/p>\n

# sudo vi \/etc\/fstab<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-17\"<\/p>\n

Reload the mounting points.<\/p>\n

# sudo mount -a<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-18\"<\/p>\n

Check the mounted partition.<\/p>\n

# df -Th<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-19\"<\/p>\n

To secure the access<\/strong> to the Nakivo Hardened Repository, disable SSH service.<\/p>\n

# sudo systemctl disable ssh.service<\/span>
\n# sudo systemctl stop ssh.service<\/span><\/p>\n

\"nakivo-hardened-repository-configuration-20\"<\/p>\n

 <\/p>\n

Test the backup<\/h2>\n

Create a new Backup Job<\/strong> by specifying the new Nakivo Hardened Repository as Destination<\/strong>.<\/p>\n

\"nakivo-hardened-repository-configuration-21\"<\/p>\n

Run the job.<\/p>\n

\"nakivo-hardened-repository-configuration-22\"<\/p>\n

Depending on the VM size, after a few minutes the job is completed successfully.<\/p>\n

\"nakivo-hardened-repository-configuration-23\"<\/p>\n

 <\/p>\n

Test immutability<\/h2>\n

To test the Nakivo Hardened Repository, try deleting the just created backup. Access the Settings > Repositories<\/strong> section and select the Hardened Repository.<\/p>\n

\"nakivo-hardened-repository-configuration-24\"<\/p>\n

Select the job to test, and then try to delete it. As expected, the backup cannot be deleted<\/strong> because it's immutable.<\/p>\n

\"\"<\/p>\n

The message displayed is self-explanatory.<\/p>\n

\"nakivo-hardened-repository-configuration-26\"<\/p>\n

Ensuring immutability for backups stored in the Nakivo Hardened Repository is the only defense<\/strong> a company has to protect its business against potential ransomware attacks<\/a>.<\/p>\n

\"signature\"<\/p>\n","protected":false},"excerpt":{"rendered":"

To protect backup data from overwrites, deletions, and modifications, you must make the backups immutable by saving them to a Nakivo Hardened Repository. Nakivo Backup & Replication supports immutability and allows administrators to configure Hardened Repositories without relying on commercial storage solutions only.<\/p>\n","protected":false},"author":3,"featured_media":65666,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"no","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[{"account":"facebook_2879994398731222_234218296615646","service":"facebook","timestamp":1756882872,"status":"success"},{"account":"twitter_113568041_113568041","service":"twitter","timestamp":1756882941,"status":"success"},{"account":"linkedin_93tdZWzMZc_93tdZWzMZc","service":"linkedin","timestamp":1756882963,"status":"success"}],"rop_publish_now_status":"done","footnotes":""},"categories":[2138,1697],"tags":[579,2330,2297],"class_list":["post-65634","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backup-en","category-nakivo-en","tag-backup-en","tag-hardened-repository","tag-immutability-en","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/65634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=65634"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/65634\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/65666"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=65634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=65634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=65634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}