[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC):2025-09-04。"],[[["\u003cp\u003eThe Google Distributed Cloud (GDC) air-gapped appliance guest environment is essential for configuring SSH keys on virtual machines (VMs).\u003c/p\u003e\n"],["\u003cp\u003eThe guest environment allows for remote VM connection and file transfer through the secure copy (SCP) command-line tool.\u003c/p\u003e\n"],["\u003cp\u003eAccess management can be disabled within the guest environment, by modifying the VM's \u003ccode\u003espec\u003c/code\u003e field via the command \u003ccode\u003ekubectl edit virtualmachines.virtualmachine.gdc.goog <VM_NAME> -n <VM_NAMESPACE>\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eTo disable access management, set the \u003ccode\u003eaccessManagement.enable\u003c/code\u003e field to \u003ccode\u003efalse\u003c/code\u003e within the \u003ccode\u003espec.guestEnvironment\u003c/code\u003e section of the VM configuration.\u003c/p\u003e\n"],["\u003cp\u003eAfter disabling access management, a restart of the VM is required for the changes to take effect.\u003c/p\u003e\n"]]],[],null,["# Guest environment\n\nThe Google Distributed Cloud (GDC) air-gapped appliance guest environment is a necessary component to configure SSH keys on your virtual machines (VM) to both connect and transfer files remotely. You must have the guest environment before you [connect to a VM](/distributed-cloud/hosted/docs/latest/appliance/application/ao-user/vms/connect-to-vm/connect-to-a-vm) and [transfer files](/distributed-cloud/hosted/docs/latest/appliance/application/ao-user/vms/connect-to-vm/transfer-files), where you configure the SSH keys and use the secure copy (SCP) command-line tool. The guest environment is installed and enabled by default on all GDC VMs.\n\n### Request permissions and access\n\nTo perform the tasks listed in this page, you must have the Project\nVirtualMachine Admin role. Follow the steps to either\n[verify](/distributed-cloud/hosted/docs/latest/appliance/application/ao-user/vms/preparation#verify-user-access)\nyour access or have your Project IAM Admin\n[assign](/distributed-cloud/hosted/docs/latest/appliance/application/ao-user/vms/preparation)\nyou the Project VirtualMachine Admin (`project-vm-admin`) role in the namespace\nof the project where the VM resides.\n\nDisable access management\n-------------------------\n\nFollow these steps to disable the access management feature while keeping the\nguest environment enabled:\n\n1. Stop your VM.\n2. Edit the VM `spec` field:\n\n kubectl edit virtualmachines.virtualmachine.gdc.goog \u003cvar translate=\"no\"\u003eVM_NAME\u003c/var\u003e -n \u003cvar translate=\"no\"\u003eVM_NAMESPACE\u003c/var\u003e\n\n Replace \u003cvar translate=\"no\"\u003e\u003ccode translate=\"no\" dir=\"ltr\"\u003eVM_NAME\u003c/code\u003e\u003c/var\u003e with your VM name, and\n \u003cvar translate=\"no\"\u003e\u003ccode translate=\"no\" dir=\"ltr\"\u003eVM_NAMESPACE\u003c/code\u003e\u003c/var\u003e with your VM namespace.\n3. Add the following fields to the `spec` field:\n\n apiVersion: virtualmachine.gdc.goog/v1\n kind: VirtualMachine\n metadata:\n name: vm-example\n namespace: project-example\n spec:\n guestEnvironment:\n accessManagement:\n enable: false\n\n The `name` field contains your VM name, and the `namespace` field contains\n your VM namespace.\n4. [Restart your VM](/distributed-cloud/hosted/docs/latest/appliance/application/ao-user/vms/manage-vms/operations-and-lifecycle/start-and-stop-vm#restart-a-vm)."]]