Google Distributed Cloud for bare metal downloads

This page provides commands to download and verify the following artifacts for Google Distributed Cloud (software only) for bare metal (formerly known as Google Distributed Cloud Virtual, previously known as Anthos clusters on bare metal):

• bmctl command-line tool.
• Google Distributed Cloud software offline container images package.

This page is for Admins and architects and Operators who manage the lifecycle of the underlying tech infrastructure. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE user roles and tasks .

Sign in

Sign in with any Google Account:

 gcloud  
auth  
login 

Download bmctl

bmctl is the command-line tool for Google Distributed Cloud that simplifies cluster creation and management. For more information about what you can do with bmctl , see bmctl tool .

From your Linux admin workstation, use the following commands to download bmctl and make it executable:

 gcloud  
storage  
cp  
gs://anthos-baremetal-release/bmctl/ VERSION 
/linux-amd64/bmctl  
.

chmod  
+x  
./bmctl 

Replace VERSION with the version of Google Distributed Cloud you want to install or upgrade your clusters to. Here's the list of the latest patch versions for supported minor versions:

• 1.33.0-gke.799
• 1.32.400-gke.68
• 1.31.800-gke.32

For a list of all available versions, see Version history .

Verify bmctl using openssl

Verify the bmctl binary against the public key using openssl , where VERSION is the file's version:

1. If you haven't already, write the pubic key to a file, public.key :

    cat << 
   EOF > 
   public.key
   -----BEGIN  
   PUBLIC  
   KEY-----
   MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ
   wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw == 
   -----END  
   PUBLIC  
   KEY-----
   EOF 
   

2. Download the digital signature file for the specific version of bmctl that you downloaded:

    gcloud  
   storage  
   cp  
   gs://anthos-baremetal-release/bmctl/ VERSION 
   /linux-amd64/bmctl.1.sig  
   . 
   

3. Use OpenSSL to verify the signature:

    openssl  
   dgst  
   -verify  
   public.key  
   -signature  
   ./bmctl.1.sig  
   ./bmctl 
   

   Expected output of this command is Verified OK .

Download the images package

You only need the images package if you plan on setting up a registry mirror . The package provides all of the container images used by Google Distributed Cloud for the specified version. Make sure the package you download is the same version as the bmctl download.

From your Linux admin workstation, run the following command to download the package:

 gcloud  
storage  
cp  
gs://anthos-baremetal-release/bmctl/ VERSION 
/linux-amd64/bmpackages_ VERSION 
.tar.xz  
. 

Verify the images package using openssl

Verify the images package binary against the public key using openssl , where VERSION is the file's version:

1. If you haven't already, write the pubic key to a file, public.key :

    cat << 
   EOF > 
   public.key
   -----BEGIN  
   PUBLIC  
   KEY-----
   MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWZrGCUaJJr1H8a36sG4UUoXvlXvZ
   wQfk16sxprI2gOJ2vFFggdq3ixF2h4qNBt0kI7ciDhgpwS8t+/960IsIgw == 
   -----END  
   PUBLIC  
   KEY-----
   EOF 
   

2. Download the digital signature file for the specific version of bmctl that you downloaded:

    gcloud  
   storage  
   cp  
   gs://anthos-baremetal-release/bmctl/ VERSION 
   /linux-amd64/bmpackages_ VERSION 
   .tar.xz.1.sig  
   . 
   

3. Use OpenSSL to verify the signature:

    openssl  
   dgst  
   -verify  
   public.key  
   -signature  
    \ 
     
   ./bmpackages_ VERSION 
   .tar.xz.1.sig  
    \ 
     
   ./bmpackages_ VERSION 
   .tar.xz 
   

   Expected output of this command is Verified OK .