Creating and starting a VM instance

This document explains how to create a virtual machine (VM) instance using a boot disk image, a boot disk snapshot, or a container image. Some images support Shielded VM features, which offer security features like UEFI-compliant firmware, Secure Boot, and vTPM-protected Measured Boot. On Shielded VMs, vTPM and integrity monitoring are enabled by default.

You can create one or more disks for your VM during the creation process. You can also add more disks to the VM after it is created. Compute Engine automatically starts the VM after you create it.

This document explains basic ways to create a VM. For more specific or complicated VM configurations, see the following resources:

If you are bringing an existing license, see Bringing your own license with sole-tenant nodes.

Before you begin

Creating a VM instance from an image

This section explains how to create a VM from a public OS image or a custom image. A VM contains a bootloader, a boot file system, and an OS image.

Viewing a list of public images available on Compute Engine

Before you create a VM by using a public image, review the list of public images that are available on Compute Engine.

For more information about the features available with each public image, see Feature support by operating system.

Console

  1. In the Google Cloud Console, go to the Images page.

    Go to Images

gcloud

  1. Run the following command:

    gcloud compute images list

  2. Make note of the name of the image or image family, and the project containing the image.

  3. Optional: determine whether the image supports Shielded VM features. To do this, run the following command, and check for UEFI_COMPATIBLE in the output:

    gcloud compute images describe VM_NAME \
    --project IMAGE_PROJECT

    Replace the following:

    • VM_NAME: name of the image to check for support of Shielded VM features
    • IMAGE_PROJECT: project containing the image

API

  1. Run the following command:

    GET https://compute.googleapis.com/compute/v1/projects/IMAGE_PROJECT/global/images/

  2. Make note of the name of the image or image family and the project containing the image.

  3. Optional: determine whether the image supports Shielded VM features. To do this, run the following command, and check for UEFI_COMPATIBLE in the output:

    GET https://compute.googleapis.com/compute/v1/projects/IMAGE_PROJECT/global/images/IMAGE_NAME

    Replace the following:

    • IMAGE_PROJECT: project containing the image
    • IMAGE_NAME: name of the image to check for support of Shielded VM features

Creating a VM instance from a public image

Google, as well as open source communities and third-party vendors, provides and maintains public OS images. By default, all Google Cloud projects can create VMs from public OS images. However, if your Cloud project has a defined list of trusted images, you can use only the images on that list to create a VM.

If you create a Shielded VM image with a local SSD, you can't shield data with integrity monitoring or the virtual platform trusted module (vTPM).

Console

  1. In the Google Cloud Console, go to the VM instances page.

    Go to VM instances

  2. Select your project and click Continue.

  3. Click Create instance.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Optional: Change the Zone for this VM. Compute Engine randomizes the list of zones within each region to encourage use across multiple zones.

  6. Select a Machine configuration for your VM.

  7. In the Boot disk section, click Change to configure your boot disk. Unless you explicitly choose a different boot disk, if the name of the new VM matches the name of an existing persistent disk, then the existing persistent disk automatically attaches to the new VM as the boot disk.

  8. In the Public images tab, choose an operating system and version.

  9. Click Save to confirm your boot disk options.

  10. Select Allow HTTP traffic or Allow HTTPS traffic to permit HTTP or HTTPS traffic to the VM. When you select one of these, Compute Engine adds a network tag to your VM, which associates the firewall rule with the VM. Then, Compute Engine creates the corresponding ingress firewall rule that allows all incoming traffic on tcp:80 (HTTP) or tcp:443 (HTTPS).

  11. Optional: If you chose an OS image that supports Shielded VM features, you can modify the Shielded VM settings:

    1. Click the Security tab in the Management, security, disks, networking, sole tenancy section.

    2. To enable Secure Boot, select Turn on Secure Boot. Secure Boot is disabled by default.

    3. To disable vTPM, clear Turn on vTPM. vTPM is enabled by default. Disabling vTPM also disables integrity monitoring because integrity monitoring relies on data gathered by Measured Boot.

    4. To disable integrity monitoring, clear the Turn on Integrity Monitoring checkbox. Integrity monitoring is enabled by default.

  12. Click the Create button to create and start the VM.

gcloud

  1. Select a public image. Make note of the name of the image or image family, and the project containing the image.

  2. Use the gcloud compute instances create command to create a VM from an image family or from a specific version of an OS image.

    If you specify the optional --shielded-secure-boot flag, Compute Engine creates a VM with all three of the following Shielded VM features enabled:

    After Compute Engine starts your VM, you must stop the VM to modify Shielded VM options.

    gcloud compute instances create VM_NAME \
    [--image IMAGE | --image-family IMAGE_FAMILY] \
    --image-project IMAGE_PROJECT

    Replace the following:

    • VM_NAME: name of the new VM.
    • IMAGE or IMAGE_FAMILY: Specify one of the following:
      • IMAGE: required version of a public image. For example, --image debian-10-buster-v20200309.
      • IMAGE_FAMILY: an image family. This creates the VM from the most recent, non-deprecated OS image. For example, if you specify --image-family debian-10, Compute Engine creates a VM from the latest version of the OS image in the Debian 10 image family.
    • IMAGE_PROJECT: project containing the image.

  3. Verify that Compute Engine created the VM:

    gcloud compute instances describe VM_NAME

    Replace VM_NAME with the name of the VM.

API

  1. Select a public image. Make note of the name of the image or image family, and the project containing the image.

  2. Use the instances.insert method to create a VM from an image family or from a specific version of an OS image:

    POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/PROJECT_ZONE/instances

{
 "machineType": "zones/MACHINE_TYPE_ZONE/machineTypes/MACHINE_TYPE",
 "name": "VM_NAME",
 "disks": [
   {
     "initializeParams": {
       "sourceImage": "projects/IMAGE_PROJECT/global/images/IMAGE"
     },
     "boot": true
   }
 ],
 "shieldedInstanceConfig": {
   "enableSecureBoot": ENABLE_SECURE_BOOT
 }
}

    Replace the following:

    • PROJECT_ID: ID of the project to create the VM in.
    • PROJECT_ZONE: zone to create the VM in.
    • MACHINE_TYPE_ZONE: zone containing the machine type to use for the new VM.
    • MACHINE_TYPE: machine type, predefined or custom, for the new VM.
    • VM_NAME: name of the new VM.
    • IMAGE_PROJECT: project containing the image. For example, if you specify debian-10 as the image family, specify debian-cloud as the image project.
    • IMAGE or IMAGE_FAMILY: specify one of the following:
      • IMAGE: required version of a public image. For example, "sourceImage": "projects/debian-cloud/global/images/debian-10-buster-v20200309"
      • IMAGE_FAMILY: an image family. This creates the VM from the most recent, non-deprecated OS image. For example, if you specify "sourceImage": "projects/debian-cloud/global/images/family/debian-10", Compute Engine creates a VM from the latest version of the OS image in the Debian 10 image family.
    • ENABLE_SECURE_BOOT: Optional: If you chose an image that supports Shielded VM features, Compute Engine, by default, enables the virtual trusted platform module (vTPM) and integrity monitoring. Compute Engine does not enable Secure Boot by default. If you specify true for enableSecureBoot, Compute Engine creates a VM with all three Shielded VM features enabled. After Compute Engine starts your VM, to modify Shielded VM options, you must stop the VM.

Python

compute/api/create_instance.py 
def create_instance(compute, project, zone, name, bucket):
    # Get the latest Debian Jessie image.
    image_response = compute.images().getFromFamily(
        project='debian-cloud', family='debian-9').execute()
    source_disk_image = image_response['selfLink']

    # Configure the machine
    machine_type = "zones/%s/machineTypes/n1-standard-1" % zone
    startup_script = open(
        os.path.join(
            os.path.dirname(__file__), 'startup-script.sh'), 'r').read()
    image_url = "http://storage.googleapis.com/gce-demo-input/photo.jpg"
    image_caption = "Ready for dessert?"

    config = {
        'name': name,
        'machineType': machine_type,

        # Specify the boot disk and the image to use as a source.
        'disks': [
            {
                'boot': True,
                'autoDelete': True,
                'initializeParams': {
                    'sourceImage': source_disk_image,
                }
            }
        ],

        # Specify a network interface with NAT to access the public
        # internet.
        'networkInterfaces': [{
            'network': 'global/networks/default',
            'accessConfigs': [
                {'type': 'ONE_TO_ONE_NAT', 'name': 'External NAT'}
            ]
        }],

        # Allow the instance to access cloud storage and logging.
        'serviceAccounts': [{
            'email': 'default',
            'scopes': [
                'https://www.googleapis.com/auth/devstorage.read_write',
                'https://www.googleapis.com/auth/logging.write'
            ]
        }],

        # Metadata is readable from the instance and allows you to
        # pass configuration from deployment scripts to instances.
        'metadata': {
            'items': [{
                # Startup script is automatically executed by the
                # instance upon startup.
                'key': 'startup-script',
                'value': startup_script
            }, {
                'key': 'url',
                'value': image_url
            }, {
                'key': 'text',
                'value': image_caption
            }, {
                'key': 'bucket',
                'value': bucket
            }]
        }
    }

    return compute.instances().insert(
        project=project,
        zone=zone,
        body=config).execute()

Creating a VM from a custom image

A custom image belongs only to your project. To create a VM with a custom image, you must first have a custom image. To learn how to create a custom image, read Creating a custom image.

Console

  1. Go to the VM instances page.

    Go to VM instances

  2. Select your project and click Continue.

  3. Click the Create instance button.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Optional: change the Zone for this VM. Compute Engine randomizes the list of zones within each region to encourage use across multiple zones.

  6. Select a Machine configuration for your VM.

  7. In the Boot disk section, click Change to configure your boot disk.

    Create a boot disk no larger than 2 TB to account for the limitations of MBR partitions.

  8. Select the Custom Images tab.

  9. Make sure your project is selected in the drop-down list.

  10. Choose the image you want and click the Select button.

  11. To permit HTTP or HTTPS traffic to the VM instance, select Allow HTTP traffic or Allow HTTPS traffic.

    The Cloud Console adds a network tag to your VM and creates the corresponding ingress firewall rule that allows all incoming traffic on tcp:80 (HTTP) or tcp:443 (HTTPS). The network tag associates the firewall rule with the VM. For more information, see Firewall rules overview in the Virtual Private Cloud documentation.

  12. Click the Create button to create and start the VM.

gcloud

Run the gcloud compute instances create command to create a VM with a custom image:

gcloud compute instances create VM_NAME \
    --image-project IMAGE_PROJECT \
    [--image IMAGE | --image-family IMAGE_FAMILY]

Replace the following:

  • VM_NAME: name of the VM.
  • IMAGE_PROJECT: name of the project that contains the image.

  • IMAGE or IMAGE_FAMILY: specify one of the following:

    • IMAGE: name of your custom image. For example, --image my-debian-image-v2.
    • IMAGE_FAMILY: if you created your custom images as part of a custom image family, specify that custom image family. This creates the VM from the most recent, non-deprecated OS image OS version in your custom image family. For example, if you specify --image-family my-debian-family, Compute Engine creates a VM from the latest OS image in your custom my-debian-family image family.

API

The process for creating a VM with a custom image in the API is the same as if you were creating a VM with a publicly available image.

To create the VM from a custom image, use the instances.insert method and in the sourceImage URI, provide the project ID (for the project that contains the custom image) and the custom image name.

POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/PROJECT_ZONE/instances

{
 "machineType": "zones/MACHINE_TYPE_ZONE/machineTypes/MACHINE_TYPE",
 "name": "VM_NAME",
 "disks": [
   {
     "initializeParams": {
       "sourceImage": "projects/IMAGE_PROJECT/global/images/IMAGE"
     },
     "boot": true
   }
 ],
 .....
}

Replace the following:

  • PROJECT_ID: ID of the project to create the VM in.
  • PROJECT_ZONE: zone to create the VM in.
  • MACHINE_TYPE_ZONE: zone containing the machine type to use for the new VM.
  • MACHINE_TYPE: machine type, predefined or custom, for the new VM.
  • VM_NAME: name of the new VM.
  • IMAGE_PROJECT: name of the project that contains the custom image.

  • IMAGE or IMAGE_FAMILY: specify one of the following:

    • IMAGE: name of your custom image. For example, "sourceImage": "projects/my-project-1234/global/images/my-debian-image-v2".
    • IMAGE_FAMILY: if you created your custom images as part of a custom image family, specify that custom image family. This creates the VM from the most recent, non-deprecated OS image OS version in your custom image family. For example, if you specify "sourceImage": "projects/my-project-1234/global/images/family/my-debian-family", Compute Engine creates a VM from the latest version of the OS image in the custom my-debian-family image family.

Creating a VM instance with additional non-boot disks

Console

  1. In the Google Cloud Console, go to the VM instances page.

    Go to VM instances

  2. Select your project and click Continue.

  3. Click Create instance.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Optional: change the Zone for this VM. Compute Engine randomizes the list of zones within each region to encourage use across multiple zones.

  6. Select a Machine configuration for your VM.

  7. In the Boot disk section, click Change to configure your boot disk. Unless you explicitly choose a different boot disk, if the name of the new VM matches the name of an existing persistent disk, then the existing persistent disk automatically attaches to the new VM as the boot disk.

  8. In the Public images tab, choose an operating system and version.

  9. Click Save to confirm your boot disk options.

  10. Select Allow HTTP traffic or Allow HTTPS traffic to permit HTTP or HTTPS traffic to the VM. When you select one of these, Compute Engine adds a network tag to your VM, which associates the firewall rule with the VM. Then, Compute Engine creates the corresponding ingress firewall rule that allows all incoming traffic on tcp:80 (HTTP) or tcp:443 (HTTPS).

  11. To add non-boot disks to your VM:

    1. Click the Management, security, disks, networking, sole tenancy section.
    2. Click the Disks tab.
    3. Under Additional disks click Add new disk.
    4. Specify a disk Name, Type, Source type, Mode, and Deletion rule.
    5. Click Done.
    6. Add disks as needed.

  12. Click the Create button to create and start the VM.

gcloud

Run the gcloud compute instances create command to create a VM with additonal non-boot disks.

You can add up to 128 non-boot disks while you're creating your VM. Specify the --create-disk flag for each non-boot disk you create.

To create non-boot disks from a public or stock image, specify the image or image-family and image-project properties in the --create-disk flag. To create a blank disk, don't include these properties. Optional: include properties for the disk size and type.

gcloud compute instances create VM_NAME \
    [--image IMAGE | --image-family IMAGE_FAMILY] \
    --image-project IMAGE_PROJECT \
    --create-disk [image=DISK_IMAGE | image-family=DISK_IMAGE_FAMILY ],image-project=DISK_IMAGE_PROJECT,size=SIZE_GB,type=DISK_TYPE

Replace the following:

  • VM_NAME: name of the new VM.

  • IMAGE or IMAGE_FAMILY. Specify one of the following:

    • IMAGE: required version of a public image. For example, --image debian-10-buster-v20200309.
    • IMAGE_FAMILY: an image family. This creates the VM from the most recent, non-deprecated OS image. For example, if you specify --image-family debian-10, Compute Engine creates a VM from the latest version of the OS image in the Debian 10 image family.

  • IMAGE_PROJECT: project containing the image.

  • For additional disks, replace the following:

    • DISK_IMAGE or DISK_IMAGE_FAMILY: specify one of the following:
      • DISK_IMAGE: name of the image that you want to use as a non-boot disk.
      • DISK_IMAGE_FAMILY: an image family to to use as a non-boot disk.
    • DISK_IMAGE_PROJECT: image project to which the disk image belongs.
    • SIZE_GB: Optional: size of the non-boot disk.
    • DISK_TYPE: Optional: type of the persistent disk. For example, pd-ssd. For blank disks, don't specify the DISK_IMAGE, DISK_IMAGE_FAMILY, or DISK_IMAGE_PROJECT parameters.

    Format and mount the disks before using them.

API

You can create up to 128 non-boot disks at the time you create a VM instance by using the initializeParams property for each additional disk. Create additional disks with a public or private image. To add a blank disk, define the initializeParams entry with no sourceImage value.

POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/PROJECT_ZONE/instances

{
 "machineType": "zones/MACHINE_TYPE_ZONE/machineTypes/MACHINE_TYPE",
 "name": "VM_NAME",
 "disks": [
   {
     "initializeParams": {
       "sourceImage": "projects/IMAGE_PROJECT/global/images/IMAGE"
     },
     "boot": true
   },
   {
     "initializeParams": {
       "diskSizeGb": "SIZE_GB",
       "sourceImage": "projects/DISK_IMAGE_PROJECT/global/images/DISK_IMAGE",
       "diskType": "DISK_TYPE"
   },
   {
     "initializeParams": {
     "diskSizeGb": "SIZE_GB",
     "diskType": "DISK_TYPE"
   }
    }...]

Replace the following:

  • PROJECT_ID: ID of the project to create the VM in.
  • PROJECT_ZONE: zone to create the VM in.
  • MACHINE_TYPE_ZONE: zone containing the machine type to use for the new VM.
  • MACHINE_TYPE: machine type, predefined or custom, for the new VM.
  • VM_NAME: name of the new VM.
  • IMAGE_PROJECT: name of the project that contains the custom image.
  • IMAGE or IMAGE_FAMILY: specify one of the following:
    • IMAGE: name of your custom image. For example, "sourceImage": "projects/my-project-1234/global/images/my-debian-image-v2".
    • IMAGE_FAMILY: if you created your custom images as part of a custom image family, specify that custom image family. This creates the VM from the most recent, non-deprecated OS image OS version in your custom image family. For example, if you specify "sourceImage": "projects/my-project-1234/global/images/family/my-debian-family", Compute Engine creates a VM from the latest version of the OS image in the custom my-debian-family image family.
  • For additional disks, replace the following:
    • SIZE_GB: disk size.
    • DISK_IMAGE or DISK_IMAGE_FAMILY: specify either a source image or image family for the non-boot disk:
      • DISK_IMAGE: name of the image that you want to use as a non-boot disk. For example, "sourceImage": "projects/DISK_IMAGE_PROJECT/global/images/DISK_IMAGE".
      • DISK_IMAGE_FAMILY: an image family to to use as a non-boot disk. For example, "sourceImage": "projects/DISK_IMAGE_PROJECT/global/images/family/DISK_IMAGE_FAMILY".
    • DISK_TYPE: type of persistent disk, either pd-standard or pd-ssd. For blank disks, don't specify the DISK_IMAGE, DISK_IMAGE_FAMILY, or DISK_IMAGE_PROJECT parameters.

Format and mount the disks before using them.

Creating a VM instance from a shared image

If another user has shared an image with you, you can use the image to create a VM.

Console

  1. Go to the VM instances page.

    Go to VM instances

  2. Select your project and click Continue.

  3. Click the Create instance button.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Optional: change the Zone for this VM. Compute Engine randomizes the list of zones within each region to encourage use across multiple zones.

  6. Select a Machine configuration for your VM.

  7. In the Boot disk section, click Change to configure your boot disk.

    Create a boot disk no larger than 2 TB to account for the limitations of MBR partitions.

  8. Select the Custom Images tab.

  9. Select the image project from the drop-down list.

  10. Choose the image you want and click the Select button.

  11. To permit HTTP or HTTPS traffic to the VM, select Allow HTTP traffic or Allow HTTPS traffic.

    The Cloud Console adds a network tag to your VM and creates the corresponding ingress firewall rule that allows all incoming traffic on tcp:80 (HTTP) or tcp:443 (HTTPS). The network tag associates the firewall rule with the VM. For more information, see Firewall rules overview in the Virtual Private Cloud documentation.

  12. Click the Create button to create and start the VM.

gcloud

Create a VM by using the gcloud compute instances create command, and use the --image and --image-project flag to specify the image name and the project where the image resides:

gcloud compute instances create VM_NAME \
    --image IMAGE \
    --image-project IMAGE_PROJECT

Replace the following:

  • VM_NAME: name for the new VM
  • IMAGE: name of the image
  • IMAGE_PROJECT: project to which the image belongs

If the command is successful, gcloud responds with the properties of the new VM:

Created [https://compute.googleapis.com/compute/v1/projects/myproject/zones/us-central1-b/instances/example-instance].
NAME                 ZONE           MACHINE_TYPE   PREEMPTIBLE  INTERNAL_IP  EXTERNAL_IP    STATUS
example-instance     us-central1-b  e2-standard-2               10.240.0.4   104.198.53.60  RUNNING

Format and mount the disks before using them.

API

Follow the API instructions to create a VM from a public image, but specify the image field in the request body. To add blank disks, don't specify an image source. Optional: you can specify the diskSizeGb, diskType, and labels properties.

[...
image: "projects/PROJECT_ID/global/images/IMAGE_NAME
{
 "initializeParams": {
    "diskSizeGb": "SIZE_GB",
    "sourceImage": "IMAGE"
       }
 }
 ...]

Replace the following:

  • PROJECT_ID: project containing the image.
  • IMAGE_NAME: source image.
  • SIZE_GB: disk size.
  • IMAGE: source image for the non-boot disk. For blank disks, don't specify an image source.

Format and mount the disks before using them.

Creating a VM instance from a snapshot

If you backed up a boot persistent disk with a snapshot, you can use that snapshot to create a VM.

Keep in mind that if you plan to create more than one VM from the same boot disk snapshot, consider creating a custom image and creating VMs from that image instead. Boot disks created from custom images take less time to create than boot disks created from snapshots.

Creating a VM instance boot disk from a snapshot

You can restore a snapshot of a boot disk to a new boot disk when you create a VM.

Console

  1. Go to the VM instances page.

    Go to VM instances

  2. Select your project and click Continue.

  3. Click the Create instance button.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Optional: change the Zone for this VM. Compute Engine randomizes the list of zones within each region to encourage use across multiple zones.

  6. Select a Machine configuration for your VM.

  7. In the Boot disk section, click Change to configure your boot disk.

    Create a boot disk no larger than 2 TB to account for the limitations of MBR partitions.

  8. Click the Snapshots tab and choose a snapshot from the list.

  9. Click Select.

  10. To permit HTTP or HTTPS traffic to the VM, select Allow HTTP traffic or Allow HTTPS traffic.

    The Cloud Console adds a network tag to your VM and creates the corresponding ingress firewall rule that allows all incoming traffic on tcp:80 (HTTP) or tcp:443 (HTTPS). The network tag associates the firewall rule with the VM. For more information, see Firewall rules overview in the Virtual Private Cloud documentation.

  11. Click the Create button to create and start the VM.

gcloud

Use the gcloud compute instances create command and include the --source-snapshot flag:

gcloud compute instances create VM_NAME \
    --source-snapshot BOOT_SNAPSHOT_NAME \
    --boot-disk-size BOOT_DISK_SIZE \
    --boot-disk-type BOOT_DISK_TYPE \
    --boot-disk-device-name BOOT_DISK_NAME

Replace the following:

  • VM_NAME: name for the new VM.
  • BOOT_SNAPSHOT_NAME: name of the boot disk snapshot that you want to restore to the boot disk of the new VM.
  • BOOT_DISK_SIZE: Optional: size, in gigabytes, of the new boot disk. The size must be equal to or larger than the size of the source disk from which the snapshot was made.
  • BOOT_DISK_TYPE: Optional: type of the boot persistent disk. For example, pd-ssd.
  • BOOT_DISK_NAME: name of the new boot disk for this VM.

API

When you use the API to create a VM from a snapshot, the following restrictions apply:

  • Only one persistent disk can be used as the boot persistent disk.
  • You must attach the boot persistent disk as the first disk for that VM.

  • If you specify the source property, you cannot also specify the initializeParams property. Providing a source indicates that the boot persistent disk exists already, but the initializeParams property indicates that Compute Engine should create a new boot persistent disk.

    To create a VM from a boot disk snapshot, specify the sourceSnapshot field under the disks property. Optional: specify the diskSizeGb and diskType properties for the new boot disk:

POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/ZONE/instances
{
  "name": "VM_NAME",
  "machineType": "machineTypes/MACHINE_TYPE"
  "networkInterfaces": [{
    "accessConfigs": [{
      "type": "ONE_TO_ONE_NAT",
      "name": "External NAT"
    }],
    "network": "global/networks/default"
  }],
  "disks": [{
     "boot": true,
     "initializeParams": {
       "sourceSnapshot": "global/snapshots/BOOT_SNAPSHOT_NAME",
       "diskSizeGb": "BOOT_DISK_SIZE",
       "diskType": "BOOT_DISK_TYPE"
    }
   }],
 }

Replace the following:

  • PROJECT_ID: your project ID.
  • ZONE: zone where you want to create the new VM.
  • VM_NAME: name of the VM that you want to restore a snapshot to.
  • MACHINE_TYPE: machine type of the VM.
  • BOOT_SNAPSHOT_NAME: name of the snapshot that you want to use to create the boot disk of a new VM.
  • BOOT_DISK_SIZE: Optional: size, in gigabytes, for the new boot disk. The size must be equal to or larger than the size of the source disk from which the snapshot was made.
  • BOOT_DISK_TYPE: Optional: type of the boot disk, either pd-standard or pd-ssd.

Restoring non-boot snapshots to a new VM instance

Non-boot snapshots are backups of secondary persistent disks that your VM uses only for data storage. You can restore non-boot snapshots to new disks whenever you create a VM. Alternatively, you can also restore non-boot snapshots to an existing VM.

To restore non-boot snapshots to a new VM, follow these additional steps when you create a VM.

Console

When restoring non-boot snapshots to a new VM from the console, first create a disk from each snapshot. Then, attach the new disks when you create the VM.

  1. Restore each non-boot snapshot to a new disk.

    1. In the Google Cloud Console, go to the Disks page.

      Go to Disks

    2. Click Create disk.

    3. Specify a Name for your disk. See Resource naming convention.

    4. Select the Region and Zone for this disk. The disk and VM must be in the same zone.

    5. Select a disk Type.

    6. Under Source type, select Snapshot.

    7. Under the new Source snapshot field, select a non-boot snapshot that you want to restore to the new disk.

    8. Click Create to create the disk.

    9. Repeat these steps to create a disk from each snapshot that you want to restore. When creating a VM, you can add up to 15 non-boot disks.

  2. In the Google Cloud Console, go to the VM instances page.

    Go to VM instances

  3. Click Create instance.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Select the Region and Zone for this VM. The disk and VM must be in the same zone.

  6. Select a Machine type for your VM.

  7. If you want to allow incoming external traffic, change the Firewall rules for the VM.

  8. To attach disks to the VM:

    1. Click Management, security, disks, networking, sole tenancy.
    2. Select the Disks tab.
    3. Under Additional disks, click Attach existing disk.
    4. Under the new Disk field, select a disk to attach to this VM.
    5. Specify a Mode and Deletion rule for the disk.
    6. Click Done.
    7. Repeat these steps for each disk that you want to attach. When creating a VM, you can add up to 15 non-boot disks.

  9. Click Create to create and start the VM.

  10. Format and mount the attached disks before using them.

gcloud

Create a VM using the gcloud compute instances create command. For each non-boot snapshot that you want to restore, include the --create-disk flag, and specify a source-snapshot. When creating a VM, you can add up to 15 non-boot disks.

For example, to restore two non-boot snapshots to a new VM, use the following command:

gcloud compute instances create VM_NAME \
    --create-disk source-snapshot=SNAPSHOT_1_NAME,name=DISK_1_NAME,size=DISK_1_SIZE,type=DISK_1_TYPE \
    --create-disk source-snapshot=SNAPSHOT_2_NAME,name=DISK_2_NAME,size=DISK_2_SIZE,type=DISK_2_TYPE

Replace the following:

  • VM_NAME: name for the new VM.
  • SNAPSHOT_1_NAME and SNAPSHOT_2_NAME: names of non-boot snapshots that you want to restore.
  • DISK_1_NAME and DISK_2_NAME: names of the new non-boot disks for this VM.
  • DISK_1_SIZE and DISK_2_SIZE: Optional: sizes, in gigabytes, of each new non-boot disk. The sizes must be equal to or larger than the sizes of the source disks from which the snapshot was made.
  • DISK_1_TYPE and DISK_2_TYPE: Optional: types of persistent disks, either pd-standard or pd-ssd.

API

When using the API to restore a non-boot snapshot to a new VM, the following restrictions apply:

  • Only one persistent disk can be the boot persistent disk.
  • You must attach the boot persistent disk as the first disk for that VM.
  • If you specify the source property, you can't also specify the initializeParams property. Providing a source indicates that the boot persistent disk exists already, but the initializeParams property indicates that Compute Engine should create a new boot persistent disk.

Using the beta API, specify the sourceSnapshot field under the initializeParams property. You can add up to 15 non-boot disks by repeating the initializeParams property for every non-boot disk that you want to create. Optional: you can specify the diskSizeGb and diskType properties for any of the disks that you create.

For example, to restore two non-boot snapshots to a new VM, make the following request:

POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/ZONE/instances
{
  "name": "VM_NAME",
  "machineType": "machineTypes/MACHINE_TYPE"
  "networkInterfaces": [{
    "accessConfigs": [{
      "type": "ONE_TO_ONE_NAT",
      "name": "External NAT"
    }],
    "network": "global/networks/default"
  }],
  "disks": [{
     "autoDelete": "true",
     "boot": "true",
     "type": "PERSISTENT",
     "diskSizeGb": "DISK_SIZE",
     "diskType": "DISK_TYPE"
   },
   {
     "initializeParams": {
        "sourceSnapshot": "global/snapshots/SNAPSHOT_1_NAME",
        "diskSizeGb": "DISK_SIZE",
        "diskType": "DISK_TYPE"
     }
   },
   {
     "initializeParams": {
        "sourceSnapshot": "global/snapshots/SNAPSHOT_2_NAME",
        "diskSizeGb": "DISK_SIZE",
        "diskType": "DISK_TYPE"
     }
  }]
 }

Replace the following:

  • PROJECT_ID: your project ID.
  • ZONE: zone where you want to create the VM.
  • VM_NAME: name of the VM that you want to restore a snapshot to.
  • MACHINE_TYPE: machine type of the VM.
  • DISK_SIZE: Optional: size, in gigabytes, of the corresponding disk. When provided, this property must be equal to or larger than the size of the source disk from which the snapshot was made.
  • DISK_TYPE: Optional: type of the corresponding persistent disk, either pd-standard or pd-ssd.
  • SNAPSHOT_1_NAME and SNAPSHOT_2_NAME: names of non-boot snapshots that you want to restore to new, non-boot disks on the new VM.

Creating a VM instance from a container image

To deploy and launch a container on a Compute Engine VM, specify a container image name and optional configuration parameters when you create the VM. Compute Engine creates the VM using the latest version of the Container-optimized OS public image, which has Docker installed. Then, Compute Engine launches the container when the VM starts. For more information, see Deploying containers on VMs.

Console

  1. In the Google Cloud Console, go to the VM instances page.

    Go to VM instances

  2. Click Create instance.

  3. Specify a Name for your VM. See Resource naming convention.

  4. In the Container section, select the Deploy a container image to this VM instance checkbox.

  5. Specify the Container image to use—for example:

    • To select an NGINX 1.12 container image from Cloud Launcher:

      gcr.io/cloud-marketplace/google/nginx1:1.12

    • To deploy an Apache container image from Docker Hub, always specify the full Docker image name:

      docker.io/httpd:2.4

  6. Optional: click Advanced container options. For more information, see Configuring options to run your container.

  7. Click Create to create the VM, boot the VM, and launch the container.

gcloud

Run the gcloud compute instances create-with-container command:

gcloud compute instances create-with-container VM_NAME \
    --container-image CONTAINER_IMAGE

Replace the following:

  • VM_NAME: name for the new VM
  • CONTAINER_IMAGE: name of the container image

For example, the following command creates a VM named nginx-vm, which launches and runs the container image:

gcr.io/cloud-marketplace/google/nginx1:1.12

gcloud compute instances create-with-container nginx-vm \
    --container-image gcr.io/cloud-marketplace/google/nginx1:1.12

To deploy an Apache container image from Docker Hub, always specify the full Docker image name:

docker.io/httpd:2.4.

Creating a VM instance with access to other Google Cloud Services

If you plan to run an application on your VM that needs access to other Google Cloud services, create a service account before creating the VM, and then follow the instructions to set up a VM to run as a service account. A service account is a special account whose credentials you can use in your application code to access other Google Cloud services.

For more information about service accounts, see Service accounts.

Creating a VM instance in a specific subnet

By default, Google Cloud creates an auto mode VPC network called default for each project. If you create a VM without specifying its network details, Compute Engine uses the default VPC network and the auto subnet that is in the same region as the VM.

To use a different network or a subnet that you manually created in an auto mode or custom mode VPC network, you must specify the subnet when you create the VM.

Console

  1. In the Google Cloud Console, go to the VM instances page.

    Go to VM instances

  2. Select your project and click Continue.

  3. Click the Create instance button.

  4. Specify a Name for your VM. See Resource naming convention.

  5. Optional: change the Zone for this VM. Compute Engine randomizes the list of zones within each region to encourage use across multiple zones.

  6. To permit HTTP or HTTPS traffic to the VM, select Allow HTTP traffic or Allow HTTPS traffic.

    The Cloud Console adds a network tag to your VM and creates the corresponding ingress firewall rule that allows all incoming traffic on tcp:80 (HTTP) or tcp:443 (HTTPS). The network tag associates the firewall rule with the VM. For more information, see Firewall rules overview in the Virtual Private Cloud documentation.

  7. Expand the Management, security, disks, networking, sole tenancy section.

  8. Under Network interfaces in the Networking tab, specify the network details.

    1. In the Network field, select the VPC network that contains the subnet you created.
    2. In the Subnet field, select the subnet that the VM will use.

  9. Click the Create button to create and start the VM.

gcloud

Using the gcloud command-line tool, follow the same instructions to create a VM from an image or a snapshot, and add the --subnet SUBNET_NAME and --zone ZONE_NAME flags when you run the gcloud compute instances create command:

gcloud compute instances create VM_NAME \
    --subnet SUBNET_NAME \
    --zone ZONE_NAME

Replace the following:

  • VM_NAME: name of the VM.
  • SUBNET_NAME: name of the subnet. The network is inferred from the specified subnet.
  • ZONE_NAME: zone where the VM is created, such as europe-west1-b. The VM's region is inferred from the zone.

Format and mount the disks before using them.

API

Follow the API instructions to create a VM from an image or a snapshot, but specify the subnet field in the request body. To add blank disks, do not add a source image. Optional: you can specify the diskSizeGb, diskType, and labels properties.

...
"networkInterfaces": [
{
  "network": "global/networks/NETWORK_NAME",
  "subnetwork": "regions/REGION/subnetworks/SUBNET_NAME",
  "accessConfigs":
    {
      "name": "External NAT",
      "type": "ONE_TO_ONE_NAT"
    }
    {
      "initializeParams": {
         "diskSizeGb": "SIZE_GB",
         "sourceImage": "IMAGE"
    {
      "initializeParams": {
      "diskSizeGb": "SIZE_GB"
     }
 }...]

Replace the following:

  • NETWORK_NAME: network in which to create the VM.
  • REGION: name of the region in which to create the VM.
  • SUBNET_NAME: name of the subnet.
  • SIZE_GB: disk size.
  • IMAGE: source image for the non-boot disk. For blank disks don't specify an image source.

Format and mount the disks before using them.

What's next?