Option 4:Since the account will only be elevated to root(not a root account) enable this option.Īfter these tasks, we have a Linux user that will use a Private Key and will be elevated to root in the VMs Linux Backups.Īfter this, we will create a job to test(Linux Backup) the Credentials and our Private Key. Option 3: Use the RSA file extracted from the Linux Private Key. Option 2: Add the Passphrase used in ssh-keygen. Option 1:Add the user created in the Linux Guest OS Next, add the user and use the information from the Linux User and Private Key create in the Linux section. Now click add and choose to add a Linux Private Key. Open your Veeam Backup & Replication Console, and in the upper left corner we can open “Manage Credentials.” Next, we will create new Linux credentials to use in our Backups. Public Key to all our Linux VMs and all be able to use the same Key in authorized_keys.ĭepending on your environment, you can also copy the corresponding Public Key to all your Linux Guests. Note: After we test this user and add the Public Key, if is working for Linux Backup jobs, we will use Linux Puppet to spread the User vs. Ssh-rsa (public key)= Key for Veeam backup userĪfter the user is created and also the Public Key to your authorized_keys in your Linux OS, you should use the RSA_key.ppk(name that we used) file with the Private Key in Veeam. Passwd -l veeam-linux # Prevent login via password Linux command to create local user and key:Īdduser -b /var/lib/ -c “Veeam Linux user Backup” -g users -m -u 90 veeam-linux SSH key file: /var/lib/veeam-linux/.ssh/authorized_keys.Note: Use a Passphrase password(if you leave blank, will not use a Passphrase ) to use in the Veeam Section. Note: We will create a Private Key, but also a Passphrase for security reasons.Ĭreate Private Key: ssh-keygen -C “Key for Veeam Linux user Backup” -O no-x11-forwarding -O no-port-forwarding -O no-agent-forwarding Since for security reasons most companies will not provide root access to the Backup tool, we can do this by creating a nonroot account with a Linux Private Key that will be elevated to root account.įirst, we will create the user and the Private Key in Linux.
In this article, we will only focus on the Linux root account.
In Windows a Domain Administrator account, and in Linux root access to perform this type of Backups and also Restore. For Backups Guest OS files and indexing(and application awareness), Veeam needs Admin rights in Guest OS(Windows and Linux).
0 kommentar(er)
