This page provides commands to download and verify the following artifacts for Google Distributed Cloud (software only) for bare metal, formerly known as Google Distributed Cloud:
bmctl
command-line tool.- Google Distributed Cloud offline container images package.
This page is for Admins and architects and Operators who manage the lifecycle of the underlying tech infrastructure. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE Enterprise user roles and tasks.
Sign in
Sign in with any Google Account:
gcloud auth login
Download bmctl
bmctl
is the command-line tool for Google Distributed Cloud that simplifies
cluster creation and management. For more information about what you can do with
bmctl
, see bmctl
tool.
From your Linux admin workstation, use the following commands to download
bmctl
and make it executable:
gcloud storage cp gs://anthos-baremetal-release/bmctl/VERSION/linux-amd64/bmctl .
chmod +x ./bmctl
Replace VERSION
with the version of
Google Distributed Cloud you want to install or upgrade your clusters to. Here's the
list of the latest patch versions for supported minor versions:
- 1.29.400-gke.86
- 1.28.900-gke.112
- 1.16.12
For a list of all available versions, see Version history.
Verify bmctl
using openssl
Verify the bmctl
binary against the public key using openssl
, where
VERSION
is the file's version:
If you haven't already, write the pubic key to a file,
public.key
:cat << EOF > public.key -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw== -----END PUBLIC KEY----- EOF
Download the digital signature file for the specific version of
bmctl
that you downloaded:gcloud storage cp gs://anthos-baremetal-release/bmctl/VERSION/linux-amd64/bmctl.1.sig .
Use OpenSSL to verify the signature:
openssl dgst -verify public.key -signature ./bmctl.1.sig ./bmctl
Expected output of this command is
Verified OK
.
Download the images package
You only need the images package if you plan on setting up a
registry mirror. The package provides
all of the container images used by Google Distributed Cloud for the specified
version. Make sure the package you download is the same version as the bmctl
download.
From your Linux admin workstation, run the following command to download the package:
gcloud storage cp gs://anthos-baremetal-release/bmctl/VERSION/linux-amd64/bmpackages_VERSION.tar.xz .
Verify the images package using openssl
Verify the images package binary against the public key using openssl
, where
VERSION
is the file's version:
If you haven't already, write the pubic key to a file,
public.key
:cat << EOF > public.key -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw== -----END PUBLIC KEY----- EOF
Download the digital signature file for the specific version of
bmctl
that you downloaded:gcloud storage cp gs://anthos-baremetal-release/bmctl/VERSION/linux-amd64/bmpackages_VERSION.tar.xz.1.sig .
Use OpenSSL to verify the signature:
openssl dgst -verify public.key -signature \ ./bmpackages_VERSION.tar.xz.1.sig \ ./bmpackages_VERSION.tar.xz
Expected output of this command is
Verified OK
.