gcloud alpha compute machine-images create - create a Compute Engine machine image

gcloud alpha compute machine-images createIMAGE--source-instance=SOURCE_INSTANCE[--csek-key-file=FILE][--description=DESCRIPTION][--guest-flush][--no-require-csek-key-create][--source-disk-csek-key=[PROPERTY=VALUE,…]][--source-instance-zone=SOURCE_INSTANCE_ZONE][--storage-location=LOCATION][--kms-key=KMS_KEY :--kms-keyring=KMS_KEYRING--kms-location=KMS_LOCATION--kms-project=KMS_PROJECT][GCLOUD_WIDE_FLAG …]

IMAGE

Name of the machineImage to create.

--source-instance=SOURCE_INSTANCE

The source instance to create a machine image from.

--csek-key-file=FILE

Path to a Customer-Supplied Encryption Key (CSEK) key file that maps ComputeEngine machine images to user managed keys to be used when creating, mounting,or taking snapshots of disks.

If you pass- as value of the flag, the CSEK is read from stdin.Seehttps://cloud.google.com/compute/docs/disks/customer-supplied-encryptionfor more details.

--description=DESCRIPTION

Specifies a text description of the machine image.

--guest-flush

Create an application-consistent machine image by informing the OS to preparefor the snapshot process.

--require-csek-key-create

Refuse to create machine images not protected by a user managed key in the keyfile when --csek-key-file is given. This behavior is enabled by default toprevent incorrect gcloud invocations from accidentally creating machine imageswith no user managed key. Disabling the check allows creation of some machineimages without a matching Customer-Supplied Encryption Key in the supplied--csek-key-file. Seehttps://cloud.google.com/compute/docs/disks/customer-supplied-encryptionfor more details. Enabled by default, use--no-require-csek-key-create to disable.

--source-disk-csek-key=[PROPERTY=VALUE,…]

Customer-supplied encryption key of the disk attached to the source instance.Required if the source disk is protected by a customer-supplied encryption key.This flag can be repeated to specify multiple attached disks.

disk

URL of the disk attached to the source instance. This can be a full or validpartial URL

csek-key-file

path to customer-supplied encryption key.

--source-instance-zone=SOURCE_INSTANCE_ZONE

Zone of the instance to operate on. If not specified and thecompute/zone property isn't set, you mightbe prompted to select a zone (interactive mode only).

To avoid prompting when this flag is omitted, you can set thecompute/zone property:

gcloudconfigsetcompute/zoneZONE

A list of zones can be fetched by running:

gcloudcomputezoneslist

To unset the property, run:

gcloudconfigunsetcompute/zone

Alternatively, the zone can be stored in the environment variableCLOUDSDK_COMPUTE_ZONE.

--storage-location=LOCATION

Google Cloud Storage location, either regional or multi-regional, where machineimage's content is to be stored. If absent, a nearby regional or multi-regionallocation is chosen automatically.

Key resource - The Cloud KMS (Key Management Service) cryptokey that will beused to protect the machine image. The 'Compute Engine Service Agent' serviceaccount must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. Thearguments in this group can be used to specify the attributes of this resource.

--kms-key=KMS_KEY

ID of the key or fully qualified identifier for the key.

To set thekms-key attribute:

• provide the argument--kms-key on the command line.

This flag argument must be specified if any of the other arguments in this groupare specified.

--kms-keyring=KMS_KEYRING

The KMS keyring of the key.

To set thekms-keyring attribute:

• provide the argument--kms-key on the command line with a fullyspecified name;
• provide the argument--kms-keyring on the command line.

--kms-location=KMS_LOCATION

The Google Cloud location for the key.

To set thekms-location attribute:

• provide the argument--kms-key on the command line with a fullyspecified name;
• provide the argument--kms-location on the command line.

--kms-project=KMS_PROJECT

The Google Cloud project for the key.

To set thekms-project attribute:

• provide the argument--kms-key on the command line with a fullyspecified name;
• provide the argument--kms-project on the command line;
• set the propertycore/project.

Run$gcloud help for details.