Before You Begin
Before you restore VM guest OS files, mind the following prerequisites and limitations.
- Check the supported file systems. For details, see the File-Level Restore section.
- If you plan to restore VM guest OS files to their original location, Hyper-V Integration Services must be installed on the target VM.
- You cannot restore VM guest OS files from a backup that does not have any successfully created restore points.
- You cannot restore files from a backup created in the reverse incremental mode if the backup job is being performed. If the backup is created in the incremental backup mode and the backup job is being performed, you can restore files from any available restore point.
- Veeam Backup & Replication must have access to the guest OS of the target VM to deploy a coordination process. The coordination process performs a number of administrative actions on the target VM guest OS, for example, collects information about mount points.
- You cannot restore files directly to the original location from backups of BSD, Mac and Solaris VMs. Use the Copy to option instead.
- The multi-OS file-level restore wizard does not support restore of deduplicated volumes (for example, Microsoft Windows volumes with Data Deduplication enabled).
- You can restore from Novell Storage Services (NSS) only if you use the helper appliance option.
For the helper host option, mind the following:
- You can restore from ZFS using the helper host option if zpool is configured on the specified helper host.
- The helper host OS kernel must support the file system that you plan to mount on this host. Otherwise, the mount will be refused and in rare cases it may cause kernel panic.
- For the helper host option, mounting of LVM snapshots is not supported. Thus, LVM snapshots are skipped from processing.
Target Linux VM
If you want to save files to a new location, mind the following for the target Linux VM:
- Veeam Backup & Replication uses the SSH protocol to communicate with the target Linux VM and requires the SCP utility on the target VM. Make sure that the SSH daemon is properly configured and SCP utility is available on the target VM.
- Veeam Backup & Replication can restore ACL for recovered VM guest OS files. To let Veeam Backup & Replication detect the target Linux system architecture and kernel version, the following utilities must be present in the minimal configuration of the system: arch and uname.
Linux Firewalls in Helper Host and Target Linux VM
If you want to use the helper host option or if you want to restore files to a new location on another Linux VM, mind the following.
Veeam Backup & Replication automatically opens ports used for the restore process on the helper host and on the target Linux VM. Generally, Veeam Backup & Replication automatically open ports for most of popular firewalls (iptables, ufw, firewall-cmd). However, if for some reason the ports are not opened, you can open the ports manually. You can also specify these ports at the SSH Connection step of the New Linux Server wizard. Note that ports are opened dynamically: if 10 concurrent jobs are running, Veeam Backup & Replication opens ports 2500-2510.
If you are using firewalld, you can configure firewall rules to open ports only in necessary zones. By default, Veeam Backup & Replication opens ports in all active firewalld zones. If your firewall is configured for different zones, and you want to minimize security holes, you can configure Veeam Backup & Replication to open the ports only for certain zones. To do this, perform the following:
- On the helper host or target Linux host, create the /etc/VeeamNetConfig file and define the following parameter:
where zone_name_1, zone_name_2 is a list of zone names where the ports must be open. Veeam Backup & Replication will skip the zones that are not in this list.
- [Only for helper host] If you select a Linux host that is already added to the Veeam Backup & Replication infrastructure, you should also add required zones to the /opt/veeam/transport/VeeamTransportConfig file.
Veeam Backup & Replication opens the port 2500 in all zones even if you have specified the required zones in configuration files.