Getting started with Yandex Cloud Backup

In the management console, go to the folder you want to create a VM with a Cloud Backup connection in.

From the list of services, select Virtual Private Cloud.

In the left-hand panel, select Security groups.

Next to the security group you want to add rules to, click and select Edit.

Under Rules, navigate to the Egress tab and click Add.

Add the following outgoing traffic rules one by one:

Click Save.

In the management console, select the folder you want to create a VM with a Cloud Backup connection in.

From the list of services, select Identity and Access Management.

Click Create service account.

Enter a name for the service account. The naming requirements are as follows:

• It must be from 2 to 63 characters long.
• It may contain lowercase Latin letters, numbers, and hyphens.
• It must start with a letter and cannot end with a hyphen.

Click Add role and select the backup.editor role.

Click Create.

In the management console, select the folder you want to create a VM with a Cloud Backup connection in.

In the list of services, select Cloud Backup.

If you have not activated Cloud Backup yet, click Activate.

If there is no Activate button, and you have access to creating a VM with a Cloud Backup connection, it means the service has already been activated. Proceed to the next step.

In the management console, select the folder where you want to create a VM with a Cloud Backup connection.

From the list of services, select Compute Cloud.

In the left-hand panel, select Virtual machines.

Click Create virtual machine.

Under Boot disk image, select an image with a supported OS, e.g., Ubuntu 20.04.

Under Location, select an availability zone for your VM.

Under Disks and file storages and Computing resources, set the preferred VM parameters.

Minimum VM and BareMetal server specification to install and correctly run the Cloud Backup agent:

• Free disk space:

  • For Linux-based VMs: 2 GB.
  • For Windows-based VMs: 1.2 GB.

• RAM: For backups, 1 GB of RAM is required per 1 TB of backup. The RAM requirement depends on the amount and type of data processed by the Cloud Backup agent.

Under Network settings:

1. In the Subnet field, select the subnet you prepared earlier.

2. In the Public IP address field, select Auto.

   Instead of assigning a public IP address to your VM, you can link the subnet hosting this VM to a route table allowing internet access via a NAT gateway or a custom router.

3. In the Security groups field, select the security group you configured earlier.

Under Access:

• Select Access by OS Login to connect and manage access to the new VM using OS Login in Yandex Cloud Organization.

  With OS Login, you can connect to VMs using SSH keys and SSH certificates via a standard SSH client or the Yandex Cloud CLI. OS Login enables rotating the SSH keys used to access VMs, providing the most secure access option.

• If you prefer not to use OS Login, select SSH key and specify the following VM access data:

  • Under Login, enter a username.

    Alert

    Do not use root or other reserved usernames. To perform operations requiring root privileges, use the sudo command.

  • In the SSH key field, select the SSH key saved in your organization user profile.

    If there are no saved SSH keys in your profile, or you want to add a new key:

    • Click Add key.
    • Enter a name for the SSH key.
    • Upload or paste the contents of the public key file. You need to create a key pair for the SSH connection to a VM yourself.
    • Click Add.

    The SSH key will be added to your organization user profile.

    If users cannot add SSH keys to their profiles in the organization, the added public SSH key will only be saved to the user profile of the VM being created.

If you want to add multiple users with SSH keys to the VM at the same time, specify these users' data under Metadata. You can also use metadata to install additional software on a VM when creating it.

In public Linux images provided by Yandex Cloud, the functionality of connecting over SSH using login and password is disabled by default.

Under General information, specify the VM name:

• It must be from 2 to 63 characters long.
• It may contain lowercase Latin letters, numbers, and hyphens.
• It must start with a letter and cannot end with a hyphen.

Under Additional:

1. Select the service account you created earlier.
2. Enable Cloud Backup.
3. Optionally, select a backup policy or click Create to create a new one.

Click Create VM.