Dynatrace Managed Setting Up Backup Filesystem

[abnerlusung]

Hi all,

Our team already have a working mounted backup filesystem.

For additional security, I would like to seek guidance on what is the minimum requirement for mounting a filesystem for backup?

file_system_id.efs.aws-region.amazonaws.com:/ mount_point nfs4 nfsvers=4.1,rsize=1048576,wsize=1048576,hard,timeo=600,retrans=2,noresvport,_netdev 0 0

I'm looking at the following for added security, or will it cause a problem.

noexec: Do not set execution of any binaries on this partition.

nosuid: Do not set SUID/SGID access on this partition.

nodev: Do not set character or special devices access on this partition.

Kind Regards,

Abner

[PacoPorro · Accepted solution]

Hi

There's a requirement to have access from the dynatrace user

https://docs.dynatrace.com/managed/shortlink/managed-cluster-restore#automatic-cluster-backup

If dynatrace can access, the cluster does not care about NFS mount options.
You can test with

su - dynatrace -s /bin/bash -c "touch /nfs/dynatrace/backup/$(uname -n)"
ls -ltr /path/to/backup/

In case of restoration you should give execution rights to the installer

https://docs.dynatrace.com/managed/shortlink/managed-cluster-restore#restore-from-backup