Upgrading to 7.0 from Version 6.0 or Earlier

To upgrade Veeam Backup for AWS to version 7.0, a backup appliance must be running version 4.0 or later. To upgrade the appliance, check the prerequisites and follow the instructions provided in section Upgrading Appliances Using Console.

When you perform upgrade to version 7.0 from Veeam Backup for AWS version 6.0 or earlier, the backup appliance operating system is upgraded from Ubuntu 18.04 LTS to Ubuntu 22.04 LTS, and the configuration database is upgraded to PostgreSQL 15. Consider that during upgrade the original root volume of the backup appliance will be replaced with the new one.

How Upgrade to Version 7.0 Works

When upgrading backup appliances to version 7.0 from Veeam Backup for AWS version 6.0 or earlier, Veeam Backup & Replication performs the following steps:

1. Instructs Veeam Backup for AWS to create a cloud-native snapshot of the original appliance. If the upgrade process fails, the appliance will be reverted to the created snapshot.

Consider that this snapshot will be automatically removed by Veeam Backup & Replication from AWS after the upgrade operation completes successfully.

2. Upgrades version of the appliance configuration database to PostgreSQL 15: creates a new PostgreSQL database on the data volume, copies all configuration data to this database and removes the old database.
3. Saves the following configuration files and settings to the data volume: the appliance configuration file (/etc/awsbackup/config.ini), nginx configuration files (/etc/nginx/nginx.conf, /etc/nginx/proxy_params), users, MFA and time zone settings, and Linux environment (/etc/ssh/, /root/, /home/).
4. Launches a new EC2 instance from Veeam Backup for AWS 7.0 AMI that contains Ubuntu 22.04 LTS as an operating system.
5. Detaches the root volume from the newly created EC2 instance and removes the EC2 instance.
6. Detaches the outdated root volume and attaches the new root volume to the original appliance.
7. Removes the outdated root volume from AWS infrastructure.
8. Restores the configuration files and settings saved at step 3 to the new root volume.

Limitations and Prerequisites

Before you start the upgrade process, consider the following requirements and limitations:

• The IAM user whose access keys specified when deploying a backup appliance or connecting to the appliance must be assigned permissions required to perform upgrade. For the list of required permissions, see Plug-in Permissions.
• Outbound internet access must be allowed from the backup appliance to the PostgreSQL Apt Repository (apt.postgresql.org, apt-archive.postgresql.org) through port 80 over the HTTP protocol.
• Outbound internet access must be allowed from the backup appliance to the PostgreSQL through port 443 over the HTTPS protocol to download the file https://www.postgresql.org/media/keys/ACCC4CF8.asc.
• Outbound internet access must be allowed from the backup appliance to the Veeam Update Notification Server through port 443 over the HTTPS protocol.
• Outbound internet access must be allowed from the backup appliance to the Ubuntu Security Update Repository  (security.ubuntu.com) through port 80 over the HTTP protocol.
• During upgrade, the data volume of the backup appliance will temporarily contain files of 2 databases. That is why the size of the data volume must be twice the total amount of storage space used by the configuration database.
• During upgrade, Veeam Backup & Replication will create a new root volume with the default settings. That is why if you have modified the root disk settings, for example, have increased the volume size or enabled volume encryption, these settings will not be transferred, and custom 3rd-party software installed on the backup appliance will not be migrated.
• During upgrade, Veeam Backup & Replication will overwrite custom settings of the /etc/fstab configuration file on the backup appliance with the default settings. That is why if you have attached an additional EBS volume to the backup appliance, you must re-mount the volume by adding its label or UUID to the /etc/fstab file.
• After the upgrade process completes, the original root volume will be automatically deleted from AWS.

Eliminating Warnings Received During Upgrade

During upgrade to version 7.0 from Veeam Backup for AWS version 6.0 or earlier, Veeam Backup & Replication will verify whether the IAM user whose access keys are used to connect to the appliance has sufficient permissions to upgrade the appliance. If some permissions are missing, you will receive a warning.

You can manually grant missing permissions to the IAM user in AWS or instruct Veeam Backup & Replication to do it:

• If you want to grant the missing permissions manually, do the following:

1. Click Copy permissions to Clipboard.

Note that the list of copied permissions will contain all the permissions required to perform the upgrade operation, not the list of missing permissions.

2. In AWS, create an IAM policy with the missing permissions and attach the policy to the IAM user whose permissions are used to connect to the appliance.

To learn how to create IAM policies, see Appendix B. Creating IAM Policies in AWS.

3. Back to the Veeam Backup & Replication console, click Proceed.

• If you want to instruct Veeam Backup & Replication to grant the missing permissions automatically, click Grant and provide one-time access keys of an IAM user that is authorized to grant IAM permissions in the opened window. Note that the specified user must belong to the same AWS account in which the backup appliance is deployed.

Veeam Backup & Replication will create an IAM policy with missing permissions and attach the policy to the IAM user whose permissions are used to connect to the appliance.