Contact UsGet started
© 2025 Direct Cursus Technology L.L.C.

Getting started with Yandex BareMetal

Written by
Updated at December 1, 2025

Lease your first physical server and connect to it. All the leased server's resources are exclusively yours, thus providing better performance than an equivalent virtual machine.

Getting started

Sign up for Yandex Cloud and create a billing account:

  1. Navigate to the management console and log in to Yandex Cloud or create a new account.
  2. On the Yandex Cloud Billing page, make sure you have a billing account linked and it has the ACTIVE or TRIAL_ACTIVE status. If you do not have a billing account, create one and link a cloud to it.

If you have an active billing account, you can navigate to the cloud page to create or select a folder for your infrastructure.

Learn more about clouds and folders here.

Lease a server

  1. In the management console, select the folder that will contain your leased server.

  2. Go to BareMetal.

  3. Click Lease server.

  4. Select the ru-central1-m availability zone.

  5. Select the ru-central1-m3 pool.

  6. Under Configuration:

    1. Select the BA-i103-S-10G server configuration.

    2. Optionally, configure disk partitioning:

      1. Click Configure disk layout.
      2. Specify the layout parameters and click Save.

  7. Under Image, select the Ubuntu 22.04 LTS image.

  8. Under Lease conditions, specify:

    1. Number of servers: 1.
    2. Lease duration: 1 month.

  9. Under Private network, in the Private subnet field, click Create.

  10. In the window that opens, under General information, in the Name field, enter the bm-subnetwork subnet name and click Create subnet.

  11. Under Public network, select From ephemeral subnet in the Public address field.

  12. Under Access:

    1. In the Password field, select one of the following options to create a root password:

      • To generate a new root password, select New password and click Generate.

        Warning

        This option requires you to maintain password security. Save the password you generated in a secure location. Yandex Cloud does not store it, and you will not be able to retrieve it once the server is deployed.

      • To use the root password saved in a Yandex Lockbox secret, select Lockbox secret.

        In the Name, Version, and Key fields, select the secret containing your password, its version, and its key, respectively.

        If you do not have a Yandex Lockbox secret, click Create to create it.

        Choose the Custom secret type to specify a custom password or Generated to generate password automatically.

    2. In the Public SSH key field, select the SSH key saved in your organization user profile.

      If there are no SSH keys in your profile or you want to add a new key:

      1. Click Add key.

      2. Enter a name for the SSH key.

      3. Select one of the following:

        • Enter manually: Paste the contents of the public SSH key. You need to create an SSH key pair on your own.

        • Load from file: Upload the public part of the SSH key. You need to create an SSH key pair on your own.

        • Generate key: Automatically create an SSH key pair.

          When adding a new SSH key, an archive containing the key pair will be created and downloaded. In Linux or macOS-based operating systems, unpack the archive to the /home/<user_name>/.ssh directory. In Windows, unpack the archive to the C:\Users\<user_name>/.ssh directory. You do not need additionally enter the public key in the management console.

      4. Click Add.

      The system will add the SSH key to your organization user profile. If the organization has disabled the ability for users to add SSH keys to their profiles, the added public SSH key will only be saved in the user profile inside the newly created resource.

  13. Under Server information, enter the server Name: bm-server.

  14. Click Lease server.

Connect to the server

  1. In the management console, select the folder containing your server.
  2. Go to BareMetal.
  3. Find the server you need in the list, click in its row, and select KVM console.

To establish a server connection, specify the server public IP address which you can get using the management console, in the Public IP address field under Public network on the server page.

In the terminal, run this command:

ssh root@<server_public_IP_address>

If this is your first time connecting to the server, you will get this unknown host warning:

The authenticity of host '51.250.83.243 (51.250.83.243)' can't be established.
ED25519 key fingerprint is SHA256:6Mjv93NJDCaf/vu3NYwiLQK4tKI+4cfLtkd********.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

Type yes into the terminal and press Enter.

To establish a server connection, specify its public IP address which you can get using the management console, in the Public IP address field under Public network on the server page.

Make sure the Windows account has read access to the key folder.

To connect to the server, run the following command in the command line:

ssh root@<server_public_IP_address>

If this is your first time connecting to the server, you will get this unknown host warning:

The authenticity of host '89.169.132.223 (89.169.132.223)' can't be established.
ECDSA key fingerprint is SHA256:DfjfFB+in0q0MGi0HnqLNMdHssLfm1yRanB********.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

Type yes in the command line and press Enter.

To establish a server connection, specify the server public IP address which you can get using the management console, in the Public IP address field under Public network on the server page.

Establish a connection using PuTTY:

  1. Run Pageant.
    1. Right-click the Pageant icon in the task bar.
    2. In the context menu, select Add key.
    3. Select a PuTTY-generated private key in .ppk format. Enter the password for this key, if it is set.
  2. Run PuTTY.

    1. In the Host Name (or IP address) field, enter the public IP address of the server you want to connect to. Set the port to 22 and the connection type to SSH.

      ssh_add_ip

    2. In the tree on the left, select Connection → SSH → Auth.

    3. Enable Allow agent forwarding.

      ssh_choose_private_key

    4. In the tree on the left, select Connection → SSH → Auth → Credentials.

    5. In the Private key file for authentication field, select the private key file.

      ssh_choose_private_key

    6. Go back to the Sessions menu. In the Saved sessions field, enter any name for the session and click Save. This will save the session settings under the specified name. You can use this session profile to connect with Pageant.

      ssh_save_session

    7. Click Open. If this is your first time connecting to the server, you may get this unknown host warning:

      ssh_unknown_host_warning

      Click Accept. This will open a terminal window prompting you to enter the username to use for connection. Enter the root username.

      If everything is configured correctly, a connection to the server will be established.

      ssh_login

If you saved the session profile in PuTTY, you can use Pageant for future connections:

  1. Right-click the Pageant icon in the task bar.
  2. Select Saved sessions.
  3. In the saved sessions list, select the session you need.
Next
All guides