Error Installing Veeam Data Mover service Error: mkdir: cannot create directory ‘/opt/veeam’: Permission denied

KB ID: 4369
Product: Veeam Backup & Replication | 11
Published: 2022-12-14
Last Modified: 2022-12-14
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please try again later.

Challenge

When adding a Linux Server to Veeam Backup & Replication using a non-root account and not enabling the "Elevate account privileges automatically" option, the following error is shown:

Error Installing Veeam Data Mover service Error: mkdir: cannot create directory ‘/opt/veeam’: Permission denied
Data Mover Install Fail
Example of Non-root with no elevate
Example of a credential configuration that will cause the error.

Cause

This error occurs when the account specified on the SSH Connection page of the 'edit Linux server' wizard is not root or a non-root account with the "Elevate account privileges automatically" option enabled, either is required for the persistent Veeam Data Mover service to be installed.

Solution

Key Points

  • The installation of the persistent Veeam Data Mover service, while recommended, is only strictly required if the Linux server will be used as a Hardened Repository or as a Backup Proxy. If the Linux server is not used for either of those purposes, the error regarding the failure to install the Veeam Data Mover service when using a non-root account without elevation may be disregarded.
  • If the persistent Veeam Data Mover service cannot be installed on the Linux server, a non-persistent Data Mover agent will be uploaded to the /tmp/ folder and run via an SSH connection each time Veeam Backup & Replication interacts with the Linux Server.

    Note:
    Use of the non-persistent Data Movers requires that perl be installed.

For more information regarding Veeam Data Movers, please review: Veeam Backup & Replication User Guide: Veeam Data Movers

Resolution Options

Option 1: Continue Using a Non-root Account Without the Elevate Option

If the choice to not enable the "Elevate account privileges automatically" option was intentional, the error regarding failure to install the Veeam Data Mover service should be ignored.

  • When a non-root account without the "Elevate account privileges automatically" option enabled is used by Veeam Backup & Replication to communicate with a Linux server being used as a Linux Repository, the repository path must be one that the account can access without the need to sudo. Attempting to create a repository for a path that the non-root account does not own will succeed, but any job that attempts to use that repository will fail with the error:
    Error: can not create /<path>/<jobname> : No such file or directory  
    

 

Option 2: Enable the Elevate Account Privileges Automatically Option

Enabling the "Elevate account privileges automatically" option will allow Veeam Backup & Replication to install the persistent Data Mover Service, improving the performance and reliability of communication with the Linux server.

 

Option 3: Use "Single-use credentials"  — (Most Secure Option)

Note: The Single-Use Credential option is documented in the same section as Immutability because they are both parts of the "Hardened Repository" model. However, it is possible to use Single-Use Credentials without using Immutability.

When adding or editing the Linux server within the Veeam Backup & Replication console, on the SSH Connection tab, click Add and select the option for "Single-use credentials for hardened repository." Then provide credentials for a non-root account that can elevate via sudo. This account will be used one-time by Veeam to deploy the persistent Data Mover Service and not stored within the Veeam Backup & Replication configuration database.

More information regarding Single-Use Credentials is available here:

To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please try again later.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case

By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please try again later.