In this post, we are going to perform format and partition disks for our veeam Linux repository. Once we have complete this process, we will start to configure our hardened Linux repository.
Follow the below steps:
[Check disk]
sudo fdisk -l
We got a new disk :- 350GB at /dev/sdb
[Partition]
Begin by partition the disk, set to gpt and create primary partition with the size 350GB
sudo parted /dev/sdb
mklabel gpt
make primary 0GB 350GB
quit
[Formatting]
Format as XFS file system,
sudo mkfs.xfs -b size=4096 -m reflink=1, crc=1 /dev/sdb -f
[Mounting]
sudo mkdir repo
sudo mount /dev/sdb /home/laiys/repo
[Check the mount point]
df -hT
[Set mount point as permanent]
vi /etc/fstab
/dev/sdb /home/laiys/repo xfs defaults 0 0
save it
[Create a non root user]
Scenario:
username : veeam
group: veeamgroup
path : /home/laiys/repo
Create a user called "veeam"
sudo adduser veeam
Create group name "veeamgroup'
sudo groupadd veeamgroup
Add user to group
sudo usermod -a -G veeamgroup veeam
Check user in which group
groups veeam
[Set permission]
chown -R veeam:veeamgroup /home/laiys/repo
sudo chmod 700 /home/laiys/repo
[Add Veeam Repository]
When add a new repo, remember to select "Single use credentials for hardened repository"
Enter non root credential that you have created earlier
You may encounter this error message when trying to add a user without sudo right.
Workaround, temporary add 'veeam' to sudo group
sudo usermod -a -G sudo veeam
Repeat the step to use "single-use credential" again. This round you can proceed to install Veeam Transport and Data Mover.
Once complete, remove sudo right from veeam account
sudo deluser veeam sudo
Proceed to add the repo
Set fast clone on XFS
Set backup immutable for 7 days
That's all . Now you have successfully set up a hardened Linux repository.
