Guest environment release notes

This page documents updates to the guest environment, which is a set of scripts, daemons, and binaries that read the content of the metadata server to make a VM run properly on Compute Engine. Check this page for announcements about new or updated features, bug fixes, known issues, and deprecated functionality.

For more information about the guest environment, see Guest environment.

You can see the latest product updates for all of Google Cloud on the Google Cloud page, browse and filter all release notes in the Google Cloud console, or programmatically access release notes in BigQuery.

To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly.

September 03, 2025

Starting with version 20250901.00, the guest agent is migrated to a new plugin-based architecture to improve modularity. You can revert to the previous version by setting the metadata attribute enable-guest-agent-core-plugin to FALSE. For more information about the plugin-based architecture, see Guest agent.

This plugin-based guest agent is available for the following operating systems:

  • Red Hat Enterprise Linux (RHEL) 9
  • Rocky Linux 9
  • CentOS Stream 9
  • Oracle Linux 9
  • AlmaLinux 9

With the introduction of the plugin-based architecture, the guest agent includes the following updates:

  • A new command-line tool, ggactl_plugin, is available to manage and restart the guest agent core plugin. To restart the agent, run:

    ggactl_plugin coreplugin restart

    For more information, see Restarting the guest agent.

  • All guest agent components now use a new logging framework. This framework lets you set the logging level in the guest agent configuration file. For more information about the logging options, see core settings in the configuration options table.

  • The workload refresh service gce-workload-cert-refresher is now part of the guest agent's core plugin. It is no longer a separate systemd service.

  • The guest agent updates the metadata script runner and the Authorized Keys binary (Windows only) to use the new, configurable logging framework. Compatibility managers are included to facilitate the migration.

An issue is fixed where network routes were not consistently applied (GitHub Issue #516). The system now consistently applies network routes by monitoring the route table and re-adding routes when they disappear.