October 12, 2026 · Google CloudFeature
Container Optimized OS enables Arm CCA guest attestation, disables Magic SysRq on TDX host
Enabled CONFIG_ARM_CCA_GUEST in the Linux kernel for ARM64 to support guest attestation on Arm CCA Confidential VMs.
Security: Disable Magic SysRq for gmec-tdx-kernel-host
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.