Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Cloud Backup
    • All guides
    • Activating the service
      • Leasing a BareMetal server connected to Cloud Backup
      • Connecting an existing BareMetal server to Cloud Backup
      • Reconnecting a BareMetal server to Cloud Backup
      • Restoring the Cloud Backup agent
    • Viewing service resource operations
    • Limiting RAM usage by the Cloud Backup agent
    • Viewing backup statistics
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  • Troubleshooting
  1. Step-by-step guides
  2. BareMetal in Cloud Backup
  3. Leasing a BareMetal server connected to Cloud Backup

Leasing a Yandex BareMetal server connected to Cloud Backup

Written by
Yandex Cloud
Improved by
Danila N.
Updated at December 17, 2025

You can back up your BareMetal servers with supported Linux-based operating systems:

  • CentOS 7.
  • Debian 11.
  • Ubuntu 16.04 LTS.
  • Ubuntu 18.04 LTS.
  • Ubuntu 20.04 LTS.
  • Ubuntu 22.04 LTS.
  • Ubuntu 24.04 LTS.

Leasing a serverLeasing a server

Management console
  1. In the management console, select the folder where you want to lease a server.

  2. Go to BareMetal.

  3. Click Lease server and in the window that opens, select Preset configurations and a suitable BareMetal server configuration.

    To select the suitable server configuration, click the section with its name in the central part of the screen.

    Note

    To quickly find the right configuration, you can use the filter with the hardware characteristics of the configurations on the right side of the screen.

  4. Under Configuration, Location, and Lease conditions, make sure the server configuration you have provided so far is adequate.

    If not, click under Configuration to return to configuration setup.

  5. In the Lease duration field, select the lease period: 1 day, 1 month, 3 months, 6 months, or 1 year.

    When this period expires, server lease will automatically be renewed for the same period. You cannot terminate the lease during the specified lease period, but you can refuse to extend the server lease further.

  6. In the Number of servers field, select how many servers of this configuration that you want to lease.

  7. Under Image, select Marketplace and an OS supported by Cloud Backup.

  8. Optionally, under Disk, configure disk partitioning:

    1. Click Configure disk layout.

    2. Specify partition settings. To create a new partition, click Add partition.

      To configure RAID arrays and disk partitions by yourself, click Remove RAID.

    3. Click Save.

    Note

    The disk partitioning parameters are vital to have your server restored from a backup later on. For more information, see Restoring a VM or Yandex BareMetal server from a backup.

  9. Under Private network, select a private subnet in the availability zone where you are leasing the server.

    If the server’s availability zone does not have a private subnet yet, or you want to create a new private subnet, click Create and, in the window that opens, specify subnet settings as described in Creating a private subnet.

  10. Under Public network:

    • In the Public address field, select a public IP address assignment method:

      • From ephemeral subnet: Assign a random IP address. If you need to get the IP address when creating a server via a request to a DHCP server, enable Assign via DHCP.
      • From a dedicated subnet: To assign an IP address from the range of addresses of a dedicated public subnet.

        In the field that opens, select a public subnet or click Order to order a new one.

        Warning

        The dedicated public subnet does not have a DHCP server; therefore, on the network interface of the server connected to such subnet, you should manually configure a static IP address from the subnet’s range of available public IP addresses and specify the default gateway address.

    • In the Bandwidth field, select a server bandwidth package. Available bandwidth packages:

      • 10 TB per day, connection capacity, 1 Gbit/s
      • 100 TB per day, connection capacity, 10 Gbit/s

      Note

      You can select a bandwidth package only for configurations with a public IP address and network cards of 10 Gbps or higher.

      You can reduce the connection capacity to 10 TB per day only as early as 24 hours after the server lease starts.

    For the Cloud Backup agent to exchange data with the backup provider servers, make sure the server has network access to the IP addresses of Cloud Backup resources based on the following table:

    Port range Protocol Destination name CIDR blocks
    80 TCP CIDR 213.180.193.0/24
    80 TCP CIDR 213.180.204.0/24
    443 TCP CIDR 84.47.172.0/24
    443 TCP CIDR 84.201.181.0/24
    443 TCP CIDR 178.176.128.0/24
    443 TCP CIDR 213.180.193.0/24
    443 TCP CIDR 213.180.204.0/24
    7770-7800 TCP CIDR 84.47.172.0/24
    8443 TCP CIDR 84.47.172.0/24
    44445 TCP CIDR 51.250.1.0/24

    Tip

    When installing the Cloud Backup agent on your VM or BareMetal server, you might need to install missing software components from the internet. To do this, add the following outgoing traffic rule to the security group:

    • Port range: 0-65535.
    • Protocol: Any.
    • Destination name: CIDR.
    • CIDR blocks: 0.0.0.0/0.

    Once the Cloud Backup agent is installed, you can delete this rule.

  11. Under Access:

    1. In the Password field, select one of the following options to create a root password:

      • To generate a new root password, select New password and click Generate.

        Warning

        This option requires you to maintain password security. Save the password you generated in a secure location. Yandex Cloud does not store it, and you will not be able to retrieve it once the server is deployed.

      • To use the root password saved in a Yandex Lockbox secret, select Lockbox secret.

        In the Name, Version, and Key fields, select the secret containing your password, its version, and its key, respectively.

        If you do not have a Yandex Lockbox secret, click Create to create it.

        Choose the Custom secret type to specify a custom password or Generated to generate password automatically.

    2. In the Public SSH key field, select the SSH key saved in your organization user profile.

      If there are no SSH keys in your profile or you want to add a new key:

      1. Click Add key.

      2. Enter a name for the SSH key.

      3. Select one of the following:

        • Enter manually: Paste the contents of the public SSH key. You need to create an SSH key pair on your own.

        • Load from file: Upload the public part of the SSH key. You need to create an SSH key pair on your own.

        • Generate key: Automatically create an SSH key pair.

          When adding a new SSH key, an archive containing the key pair will be created and downloaded. In Linux or macOS-based operating systems, unpack the archive to the /home/<user_name>/.ssh directory. In Windows, unpack the archive to the C:\Users\<user_name>/.ssh directory. You do not need additionally enter the public key in the management console.

      4. Click Add.

      The system will add the SSH key to your organization user profile. If the organization has disabled the ability for users to add SSH keys to their profiles, the added public SSH key will only be saved in the user profile inside the newly created resource.

  12. Enable server backup in Cloud Backup:

    1. Enable Backup.
    2. Select an existing backup policy or create a new one.
    3. Select a service account with the baremetal.editor and backup.editor roles assigned or create a new one.
  13. Under Server information:

    1. Specify the server name in the Name field. Follow these naming requirements:

      • It must be from 2 to 63 characters long.
      • It can only contain lowercase Latin letters, numbers, and hyphens.
      • It must start with a letter and cannot end with a hyphen.
    2. Optionally, add a server description in the Description field.

    3. Optionally, set labels in the Labels field.

  14. Click Lease server.

For more information on leasing a server, see this BareMetal guide.

Note

If you are using LVM to manage the disk space of the protected resource, learn how to restore resources with LVM in Cloud Backup.

Was the article helpful?

Previous
Deleting a VM from Cloud Backup
Next
Connecting an existing BareMetal server to Cloud Backup
© 2026 Direct Cursus Technology L.L.C.