Google Cloud VM Manager vs OpenDSC
Google Cloud VM Manager
cloud.google.comOpenDSC
opendsc.devSide by side
| Figure | Google Cloud VM Manager | OpenDSC |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 0 |
| Spec score · Configuration Management Tools | 8.7 (#4) | 7.5 (#18) |
| Access control | Creating patch jobs or OS policy assignments requires IAM permissions that Google says can grant the ability to run code on VMs; Google recommends least privilege. | The Pull Server provides role-based access control with users, groups, and granular authorization policies. |
| Data retention | OS inventory and vulnerability report data remains until the VM is deleted, but is deleted if the OS Config agent stops reporting for a few days. | Administrators can set global and per-configuration retention policies to remove old versions and control storage use. |
| Integrations | VM Manager works with the Google Cloud console, Google Cloud CLI, direct OS Config API calls, and Terraform resources. | The Pull Server supports OpenID Connect providers including Microsoft Entra ID, Okta, and Auth0, as well as standards-compliant OIDC providers. |
| Purpose | VM Manager manages operating systems for large Windows and Linux VM fleets running on Compute Engine. | OpenDSC is a configuration management platform for Microsoft Desired State Configuration (DSC). |
Plans
Google Cloud VM Manager
- Free tierFree
- Usage-based VM ManagerFree
- VM ManagerFree
In their own words
Google Cloud VM Manager
Google Cloud VM Manager manages operating systems across Windows and Linux VM fleets running on Compute Engine. Its tools cover patch management, OS inventory and OS policies. Patch jobs apply updates on demand or on a schedule, report compliance, and can use selected approvals and pre- or post-patching scripts. OS inventory collects hostnames, OS and kernel versions, installed packages, available updates, Windows applications and OS vulnerabilities. OS policies centralize software configuration deployment, maintenance and reporting. Teams can use the Google Cloud console, Google Cloud CLI or OS Config API; Terraform can extend scope across projects. The service supports projects inside VPC Service Controls perimeters, but patch jobs operate on VMs in one project at a time. A free tier covers 100 VMs per Cloud Billing account per month, and limited-functionality mode is available at no cost for unlimited VMs. After the free tier, the listed charge is $0.003 per hour per VM with an active OS Config agent.
OpenDSC
OpenDSC is a configuration management platform for Microsoft Desired State Configuration, intended for teams managing settings across infrastructure nodes. Its Local Configuration Manager monitors system state and can automatically correct configuration drift. For centralized management, the pull server registers nodes, distributes configurations, and provides compliance reporting through a web dashboard and REST API. Configurations can be versioned, assembled into composite deployments, and parameterized by region, environment, or node. Local file-based configurations support disconnected use as well as server-driven pulls. The resource library covers Windows administration, SQL Server, and file, JSON, XML, and archive tasks across Windows, Linux, and macOS. The Resource Development Kit provides .NET libraries and tools for developing custom resources. The pull server supports OpenID Connect providers, client-certificate mutual TLS, role-based access control, and retention policies. SQLite is supported for development, while production deployments can use SQL Server or PostgreSQL. The project is MIT licensed and self-hosted. Its roadmap lists native Linux and macOS LCM services, distribution packages, and official Docker deployment as planned work.