How to recover from a shielded_vm_integrity error?

[Alan Hunter]

Hi All,

I have a VM that I run Wordpress on and I am no longer able to access the VM.

The server reports a shielded_VM_integrity error every time I boot it with vTPM enabled. I am not able to SSH into the server anymore as it just returns the below error:

"You cannot connect to the VM instance because of an unexpected error. Wait a few moments and then try again."

How do you recover from this?

If I turn off vTPM I am able to boot the VM but I can still not access the VM via SSH?

Please can someone help!

[ashok...@google.com]

Hello,

As issue with SSH could be due to various factors which need different debugging and troubleshooting. I would suggest checking Serial Console of the machine for any information regarding machine as sometimes out of space in boot disk might be the cause. I have provided some helpful link regarding the troubleshooting for SSH [1]and using the serial console [2].

Also you can request for the Cloud Platform support for the issues that might not be common using Cloud Platform support link [3].

[1] https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-ssh
[2] https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-using-serial-console
[3] https://support.google.com/cloud/answer/6282346?hl=en&ref_topic=3473162

Thank You

[Alan Hunter]

This is absolutely ridiculous!

I am trying to test GCP as a potential hosting platform for a client of mine and the first VM Instance I create is corrupt. I cannot SSH into the machine to fix the issue and the machine is running without any issues as far as I can see from the GCP web portal.

This is a POC so I am not going to sign up for premium support, but if the first VM instance I create stops working after 3 days of use and I cannot contact Google to resolve the issue why should I recommend GCP as a potential cloud hosting platform. I have worked with AWS and Azure and never had this issue.

The only thing the GCP portal states is: 

Free trial support is currently unavailable. Please visit our community support page for troubleshooting documentation.

I have been looking for documentation on how to create a new VM instance and attach an existing disk from another VM to see if this might resolve the issue but I cannot find any documentation on this. Surely GCP provides some sort of basic support for issues that appear to be related to the GCP platform?

[Derek Murphy]

Hello,

I have just tried to attach an existing disk to a VM and I have found no issue. The way that I did it was to go to the VM that I wanted and click “Edit”. Scroll down to the section called “Additional Disks” and click “Add existing disk”. A pop up tab will be on your right. Here you will see a list of all of the disks that are available for the given type of VM in a drop down menu. Select the one you want and specify any other options available in the pop tab.

These links[1][2] are simple documentation that you have probably reviewed, but I put them here just in case. 

Let me know if this helps.

[1] Creating and starting a VM instance : 

https://cloud.google.com/compute/docs/instances/create-start-instance?hl=en

[2] Creating and attaching a disk : 

https://cloud.google.com/compute/docs/disks/add-persistent-disk?hl=en