Google Distributed Cloud (GDC) 에어 갭 게스트 환경은 원격으로 연결하고 파일을 전송하기 위해 가상 머신 (VM)에 SSH 키를 구성하는 데 필요한 구성요소입니다. SSH 키를 구성하고 보안 복사 (SCP) 명령줄 도구를 사용하는 VM에 연결하고 파일을 전송하기 전에 게스트 환경이 있어야 합니다. 게스트 환경은 모든 GDC VM에 기본적으로 설치되고 사용 설정됩니다.
권한 및 액세스 요청
이 페이지에 나열된 작업을 수행하려면 프로젝트 VirtualMachine 관리자 역할이 있어야 합니다. 액세스 권한을 확인하거나 프로젝트 IAM 관리자가 VM이 있는 프로젝트의 네임스페이스에서 프로젝트 VirtualMachine 관리자 (project-vm-admin) 역할을 할당하도록 단계를 따르세요.
액세스 관리 사용 중지
게스트 환경을 사용 설정된 상태로 유지하면서 액세스 관리 기능을 사용 중지하려면 다음 단계를 따르세요.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eThe Google Distributed Cloud (GDC) air-gapped guest environment is essential for configuring SSH keys on VMs, enabling remote connection and file transfer.\u003c/p\u003e\n"],["\u003cp\u003eThe guest environment is automatically installed and enabled on all GDC VMs.\u003c/p\u003e\n"],["\u003cp\u003eTo manage VMs, you must have the Project VirtualMachine Admin role, which can be verified or assigned by the Project IAM Admin.\u003c/p\u003e\n"],["\u003cp\u003eYou can disable the access management feature within the guest environment while keeping the environment itself active, by editing the VM's \u003ccode\u003espec\u003c/code\u003e field and setting \u003ccode\u003eenable\u003c/code\u003e to \u003ccode\u003efalse\u003c/code\u003e, then restarting your VM.\u003c/p\u003e\n"]]],[],null,["# Guest environment\n\nThe Google Distributed Cloud (GDC) air-gapped guest environment is a necessary component to configure SSH keys on your virtual machines (VM) to both connect and transfer files remotely. You must have the guest environment before you [connect to a VM](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/vms/connect-to-vm/connect-to-a-vm) and [transfer files](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/vms/connect-to-vm/transfer-files), where you configure the SSH keys and use the secure copy (SCP) command-line tool. The guest environment is installed and enabled by default on all GDC VMs.\n\n### Request permissions and access\n\nTo perform the tasks listed in this page, you must have the Project\nVirtualMachine Admin role. Follow the steps to either\n[verify](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/vms/preparation#verify-user-access)\nyour access or have your Project IAM Admin\n[assign](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/vms/preparation)\nyou the Project VirtualMachine Admin (`project-vm-admin`) role in the namespace\nof the project where the VM resides.\n\nDisable access management\n-------------------------\n\nFollow these steps to disable the access management feature while keeping the\nguest environment enabled:\n\n1. Stop your VM.\n2. Edit the VM `spec` field:\n\n kubectl edit virtualmachines.virtualmachine.gdc.goog \u003cvar translate=\"no\"\u003eVM_NAME\u003c/var\u003e -n \u003cvar translate=\"no\"\u003eVM_NAMESPACE\u003c/var\u003e\n\n Replace \u003cvar translate=\"no\"\u003e\u003ccode translate=\"no\" dir=\"ltr\"\u003eVM_NAME\u003c/code\u003e\u003c/var\u003e with your VM name, and\n \u003cvar translate=\"no\"\u003e\u003ccode translate=\"no\" dir=\"ltr\"\u003eVM_NAMESPACE\u003c/code\u003e\u003c/var\u003e with your VM namespace.\n3. Add the following fields to the `spec` field:\n\n apiVersion: virtualmachine.gdc.goog/v1\n kind: VirtualMachine\n metadata:\n name: vm-example\n namespace: project-example\n spec:\n guestEnvironment:\n accessManagement:\n enable: false\n\n The `name` field contains your VM name, and the `namespace` field contains\n your VM namespace.\n4. [Restart your VM](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/vms/manage-vms/operations-and-lifecycle/start-and-stop-vm#restart-a-vm)."]]
