gcloud and gsutil for Google Container Optimized OS

cloud-config.yaml

#cloud-config

users:
  - name: cloudservice
    groups: docker
    uid: 2000

write_files:
  - path: /home/cloudservice/currentdir/gcloud-sdk-setup
    permissions: '0644'
    owner: cloudservice:cloudservice
    content: |
      export GCLOUDSDK_TAG="alpine"
      export GCLOUDSDK_IMAGE="google/cloud-sdk:${GCLOUDSDK_TAG}"
      docker pull ${GCLOUDSDK_IMAGE}

      gsutil() { 
        docker run --rm -it \
          -v $(pwd):$(pwd) \
                      -v $HOME:$HOME \
                      -v /etc/passwd:/etc/passwd:ro \
                      -v /etc/group:/etc/group:ro \
                      -v /mnt:/mnt \
                      -w $(pwd) \
                      -u $(id -u):$(id -g) \
                                  ${GCLOUDSDK_IMAGE} gsutil "$@";
      }

      gcloud() { 
        docker run --rm -it \
          -v $(pwd):$(pwd) \
                      -v $HOME:$HOME \
                      -v /etc/passwd:/etc/passwd:ro \
                      -v /etc/group:/etc/group:ro \
                      -v /mnt:/mnt \
                      -w $(pwd) \
                      -u $(id -u):$(id -g) \
                                    ${GCLOUDSDK_IMAGE} gcloud "$@";
      }

runcmd:
  - "cat /home/cloudservice/currentdir/gcloud-sdk-setup > /etc/profile.d/cloud-sdk-setup.sh"

launch.sh

gcloud compute instances create $name \
  --zone "asia-northeast1-a" \
  --machine-type "f1-micro" \
  --subnet "default" \
  --image "cos-stable-63-10032-71-0" \
  --image-project "cos-cloud" \
  --boot-disk-size "10" \
  --boot-disk-type "pd-standard" \
  --boot-disk-device-name $name \
  --metadata-from-file user-data=cloud-config.yaml \
  --scopes "https://www.googleapis.com/auth/devstorage.read_write,https://www.googleapis.com/auth/compute,https://www.googleapis.com/auth/logging.write"

"user-data" is not allowed when running containerized VM.