mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-22 03:14:57 +00:00
Add DigitalOcean as third cloud provider (#7)
New cloud provider with full agent coverage: - digitalocean/lib/common.sh: DO API wrapper, token management, droplet lifecycle - digitalocean/claude.sh, openclaw.sh, nanoclaw.sh: all 3 agents Matrix is now 3 agents x 3 clouds = 9/9 implemented. Co-authored-by: Sprite <noreply@sprite.dev> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
L
GitHub
parent
78e009176b
commit
2b129ecaaa
6 changed files with 921 additions and 1 deletions
42
README.md
42
README.md
|
|
@ -102,3 +102,45 @@ OPENROUTER_API_KEY=sk-or-v1-xxxxx \
|
|||
- `OPENROUTER_API_KEY` - Skip OAuth and use this API key directly
|
||||
- `HETZNER_SERVER_TYPE` - Server type (default: `cx22`)
|
||||
- `HETZNER_LOCATION` - Datacenter location (default: `fsn1`)
|
||||
|
||||
---
|
||||
|
||||
## DigitalOcean
|
||||
|
||||
Spawn agents on [DigitalOcean](https://www.digitalocean.com/) Droplets via REST API.
|
||||
|
||||
### Usage
|
||||
|
||||
#### Claude Code
|
||||
|
||||
```bash
|
||||
bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/claude.sh)
|
||||
```
|
||||
|
||||
#### OpenClaw
|
||||
|
||||
```bash
|
||||
bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/openclaw.sh)
|
||||
```
|
||||
|
||||
#### NanoClaw
|
||||
|
||||
```bash
|
||||
bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/nanoclaw.sh)
|
||||
```
|
||||
|
||||
### Non-Interactive Mode
|
||||
|
||||
```bash
|
||||
DO_DROPLET_NAME=dev-mk1 \
|
||||
DO_API_TOKEN=your-digitalocean-api-token \
|
||||
OPENROUTER_API_KEY=sk-or-v1-xxxxx \
|
||||
bash <(curl -fsSL https://openrouter.ai/lab/spawn/digitalocean/claude.sh)
|
||||
```
|
||||
|
||||
**Environment Variables:**
|
||||
- `DO_DROPLET_NAME` - Name for the droplet (skips prompt)
|
||||
- `DO_API_TOKEN` - DigitalOcean API token (skips prompt, saved to `~/.config/spawn/digitalocean.json`)
|
||||
- `OPENROUTER_API_KEY` - Skip OAuth and use this API key directly
|
||||
- `DO_DROPLET_SIZE` - Droplet size (default: `s-2vcpu-2gb`)
|
||||
- `DO_REGION` - Datacenter region (default: `nyc3`)
|
||||
|
|
|
|||
111
digitalocean/claude.sh
Executable file
111
digitalocean/claude.sh
Executable file
|
|
@ -0,0 +1,111 @@
|
|||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Source common functions - try local file first, fall back to remote
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
|
||||
if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
|
||||
source "$SCRIPT_DIR/lib/common.sh"
|
||||
else
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/digitalocean/lib/common.sh)
|
||||
fi
|
||||
|
||||
log_info "Claude Code on DigitalOcean"
|
||||
echo ""
|
||||
|
||||
# 1. Resolve DigitalOcean API token
|
||||
ensure_do_token
|
||||
|
||||
# 2. Generate + register SSH key
|
||||
ensure_ssh_key
|
||||
|
||||
# 3. Get droplet name and create droplet
|
||||
DROPLET_NAME=$(get_server_name)
|
||||
create_server "$DROPLET_NAME"
|
||||
|
||||
# 4. Wait for SSH and cloud-init
|
||||
verify_server_connectivity "$DO_SERVER_IP"
|
||||
wait_for_cloud_init "$DO_SERVER_IP"
|
||||
|
||||
# 5. Verify Claude Code is installed (fallback to manual install)
|
||||
log_warn "Verifying Claude Code installation..."
|
||||
if ! run_server "$DO_SERVER_IP" "command -v claude" >/dev/null 2>&1; then
|
||||
log_warn "Claude Code not found, installing manually..."
|
||||
run_server "$DO_SERVER_IP" "curl -fsSL https://claude.ai/install.sh | bash"
|
||||
fi
|
||||
log_info "Claude Code is installed"
|
||||
|
||||
# 6. Get OpenRouter API key
|
||||
echo ""
|
||||
if [[ -n "$OPENROUTER_API_KEY" ]]; then
|
||||
log_info "Using OpenRouter API key from environment"
|
||||
else
|
||||
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
|
||||
fi
|
||||
|
||||
# 7. Inject environment variables into ~/.zshrc
|
||||
log_warn "Setting up environment variables..."
|
||||
|
||||
ENV_TEMP=$(mktemp)
|
||||
cat > "$ENV_TEMP" << EOF
|
||||
|
||||
# [spawn:env]
|
||||
export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
|
||||
export ANTHROPIC_BASE_URL="https://openrouter.ai/api"
|
||||
export ANTHROPIC_AUTH_TOKEN="${OPENROUTER_API_KEY}"
|
||||
export ANTHROPIC_API_KEY=""
|
||||
export CLAUDE_CODE_SKIP_ONBOARDING="1"
|
||||
export CLAUDE_CODE_ENABLE_TELEMETRY="0"
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
|
||||
run_server "$DO_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
|
||||
rm "$ENV_TEMP"
|
||||
|
||||
# 8. Configure Claude Code settings
|
||||
log_warn "Configuring Claude Code..."
|
||||
|
||||
run_server "$DO_SERVER_IP" "mkdir -p ~/.claude"
|
||||
|
||||
SETTINGS_TEMP=$(mktemp)
|
||||
cat > "$SETTINGS_TEMP" << EOF
|
||||
{
|
||||
"theme": "dark",
|
||||
"editor": "vim",
|
||||
"env": {
|
||||
"CLAUDE_CODE_ENABLE_TELEMETRY": "0",
|
||||
"ANTHROPIC_BASE_URL": "https://openrouter.ai/api",
|
||||
"ANTHROPIC_AUTH_TOKEN": "${OPENROUTER_API_KEY}"
|
||||
},
|
||||
"permissions": {
|
||||
"defaultMode": "bypassPermissions",
|
||||
"dangerouslySkipPermissions": true
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$SETTINGS_TEMP" "/root/.claude/settings.json"
|
||||
rm "$SETTINGS_TEMP"
|
||||
|
||||
GLOBAL_STATE_TEMP=$(mktemp)
|
||||
cat > "$GLOBAL_STATE_TEMP" << EOF
|
||||
{
|
||||
"hasCompletedOnboarding": true,
|
||||
"bypassPermissionsModeAccepted": true
|
||||
}
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$GLOBAL_STATE_TEMP" "/root/.claude.json"
|
||||
rm "$GLOBAL_STATE_TEMP"
|
||||
|
||||
run_server "$DO_SERVER_IP" "touch ~/.claude/CLAUDE.md"
|
||||
|
||||
echo ""
|
||||
log_info "DigitalOcean droplet setup completed successfully!"
|
||||
log_info "Droplet: $DROPLET_NAME (ID: $DO_DROPLET_ID, IP: $DO_SERVER_IP)"
|
||||
echo ""
|
||||
|
||||
# 9. Start Claude Code interactively
|
||||
log_warn "Starting Claude Code..."
|
||||
sleep 1
|
||||
clear
|
||||
interactive_session "$DO_SERVER_IP" "source ~/.zshrc && claude"
|
||||
562
digitalocean/lib/common.sh
Executable file
562
digitalocean/lib/common.sh
Executable file
|
|
@ -0,0 +1,562 @@
|
|||
#!/bin/bash
|
||||
# Common bash functions for DigitalOcean spawn scripts
|
||||
|
||||
# ============================================================
|
||||
# Provider-agnostic functions (shared with sprite/lib/common.sh)
|
||||
# ============================================================
|
||||
|
||||
# Colors for output
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
# Print colored message (to stderr so they don't pollute command substitution output)
|
||||
log_info() {
|
||||
echo -e "${GREEN}$1${NC}" >&2
|
||||
}
|
||||
|
||||
log_warn() {
|
||||
echo -e "${YELLOW}$1${NC}" >&2
|
||||
}
|
||||
|
||||
log_error() {
|
||||
echo -e "${RED}$1${NC}" >&2
|
||||
}
|
||||
|
||||
# Safe read function that works in both interactive and non-interactive modes
|
||||
safe_read() {
|
||||
local prompt="$1"
|
||||
local result=""
|
||||
|
||||
if [[ -t 0 ]]; then
|
||||
read -p "$prompt" result
|
||||
elif echo -n "" > /dev/tty 2>/dev/null; then
|
||||
read -p "$prompt" result < /dev/tty
|
||||
else
|
||||
log_error "Cannot read input: no TTY available"
|
||||
return 1
|
||||
fi
|
||||
|
||||
echo "$result"
|
||||
}
|
||||
|
||||
# Listen on a port with netcat (handles busybox/Termux nc requiring -p flag)
|
||||
nc_listen() {
|
||||
local port=$1
|
||||
shift
|
||||
if nc --help 2>&1 | grep -q "BusyBox\|busybox" || nc --help 2>&1 | grep -q "\-p "; then
|
||||
nc -l -p "$port" "$@"
|
||||
else
|
||||
nc -l "$port" "$@"
|
||||
fi
|
||||
}
|
||||
|
||||
# Open browser to URL (supports macOS, Linux, Termux)
|
||||
open_browser() {
|
||||
local url=$1
|
||||
if command -v termux-open-url &> /dev/null; then
|
||||
termux-open-url "$url" </dev/null
|
||||
elif command -v open &> /dev/null; then
|
||||
open "$url" </dev/null
|
||||
elif command -v xdg-open &> /dev/null; then
|
||||
xdg-open "$url" </dev/null
|
||||
else
|
||||
log_warn "Please open: ${url}"
|
||||
fi
|
||||
}
|
||||
|
||||
# Manually prompt for API key
|
||||
get_openrouter_api_key_manual() {
|
||||
echo ""
|
||||
log_warn "Manual API Key Entry"
|
||||
echo -e "${YELLOW}Get your API key from: https://openrouter.ai/settings/keys${NC}"
|
||||
echo ""
|
||||
|
||||
local api_key=""
|
||||
while [[ -z "$api_key" ]]; do
|
||||
api_key=$(safe_read "Enter your OpenRouter API key: ") || return 1
|
||||
|
||||
if [[ -z "$api_key" ]]; then
|
||||
log_error "API key cannot be empty"
|
||||
elif [[ ! "$api_key" =~ ^sk-or-v1-[a-f0-9]{64}$ ]]; then
|
||||
log_warn "Warning: API key format doesn't match expected pattern (sk-or-v1-...)"
|
||||
local confirm=$(safe_read "Use this key anyway? (y/N): ") || return 1
|
||||
if [[ "$confirm" =~ ^[Yy]$ ]]; then
|
||||
break
|
||||
else
|
||||
api_key=""
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
log_info "API key accepted!"
|
||||
echo "$api_key"
|
||||
}
|
||||
|
||||
# Try OAuth flow, fallback to manual entry if it fails
|
||||
try_oauth_flow() {
|
||||
local callback_port=${1:-5180}
|
||||
|
||||
log_warn "Attempting OAuth authentication..."
|
||||
|
||||
if ! command -v nc &> /dev/null; then
|
||||
log_warn "netcat (nc) not found - OAuth server unavailable"
|
||||
return 1
|
||||
fi
|
||||
|
||||
local callback_url="http://localhost:${callback_port}/callback"
|
||||
local auth_url="https://openrouter.ai/auth?callback_url=${callback_url}"
|
||||
|
||||
local oauth_dir=$(mktemp -d)
|
||||
local code_file="$oauth_dir/code"
|
||||
|
||||
log_warn "Starting local OAuth server on port ${callback_port}..."
|
||||
|
||||
(
|
||||
local success_response='HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<html><head><style>@keyframes checkmark{0%{transform:scale(0) rotate(-45deg);opacity:0}60%{transform:scale(1.2) rotate(-45deg);opacity:1}100%{transform:scale(1) rotate(-45deg);opacity:1}}@keyframes fadein{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}body{font-family:system-ui,-apple-system,sans-serif;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#1a1a2e}.card{text-align:center;color:#fff}.check{width:80px;height:80px;border-radius:50%;background:#00d4aa22;display:flex;align-items:center;justify-content:center;margin:0 auto 24px}.check::after{content:"";display:block;width:28px;height:14px;border-left:4px solid #00d4aa;border-bottom:4px solid #00d4aa;animation:checkmark .5s ease forwards}h1{color:#00d4aa;margin:0 0 8px;font-size:1.6rem}p{margin:0 0 6px;color:#ffffffcc;font-size:1rem}.sub{color:#ffffff66;font-size:.85rem;animation:fadein .5s ease .5s both}</style></head><body><div class="card"><div class="check"></div><h1>Authentication Successful!</h1><p>Redirecting back to terminal...</p><p class="sub">This tab will close automatically</p></div><script>setTimeout(function(){try{window.close()}catch(e){}setTimeout(function(){document.querySelector(".sub").textContent="You can safely close this tab"},500)},3000)</script></body></html>'
|
||||
|
||||
while true; do
|
||||
local response_file=$(mktemp)
|
||||
echo -e "$success_response" > "$response_file"
|
||||
|
||||
local request=$(nc_listen "$callback_port" < "$response_file" 2>/dev/null | head -1)
|
||||
local nc_status=$?
|
||||
rm -f "$response_file"
|
||||
|
||||
if [[ $nc_status -ne 0 ]]; then
|
||||
break
|
||||
fi
|
||||
|
||||
if [[ "$request" == *"/callback?code="* ]]; then
|
||||
local code=$(echo "$request" | sed -n 's/.*code=\([^ &]*\).*/\1/p')
|
||||
echo "$code" > "$code_file"
|
||||
break
|
||||
fi
|
||||
done
|
||||
) </dev/null &
|
||||
local server_pid=$!
|
||||
|
||||
sleep 1
|
||||
|
||||
if ! kill -0 $server_pid 2>/dev/null; then
|
||||
log_warn "Failed to start OAuth server (port may be in use)"
|
||||
rm -rf "$oauth_dir"
|
||||
return 1
|
||||
fi
|
||||
|
||||
log_warn "Opening browser to authenticate with OpenRouter..."
|
||||
open_browser "$auth_url"
|
||||
|
||||
local timeout=120
|
||||
local elapsed=0
|
||||
while [[ ! -f "$code_file" ]] && [[ $elapsed -lt $timeout ]]; do
|
||||
sleep 1
|
||||
((elapsed++))
|
||||
done
|
||||
|
||||
kill $server_pid 2>/dev/null || true
|
||||
wait $server_pid 2>/dev/null || true
|
||||
|
||||
if [[ ! -f "$code_file" ]]; then
|
||||
log_warn "OAuth timeout - no response received"
|
||||
rm -rf "$oauth_dir"
|
||||
return 1
|
||||
fi
|
||||
|
||||
local oauth_code=$(cat "$code_file")
|
||||
rm -rf "$oauth_dir"
|
||||
|
||||
log_warn "Exchanging OAuth code for API key..."
|
||||
local key_response=$(curl -s -X POST "https://openrouter.ai/api/v1/auth/keys" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"code\": \"$oauth_code\"}")
|
||||
|
||||
local api_key=$(echo "$key_response" | grep -o '"key":"[^"]*"' | sed 's/"key":"//;s/"$//')
|
||||
|
||||
if [[ -z "$api_key" ]]; then
|
||||
log_error "Failed to exchange OAuth code: ${key_response}"
|
||||
return 1
|
||||
fi
|
||||
|
||||
log_info "Successfully obtained OpenRouter API key via OAuth!"
|
||||
echo "$api_key"
|
||||
}
|
||||
|
||||
# Main function: Try OAuth, fallback to manual entry
|
||||
get_openrouter_api_key_oauth() {
|
||||
local callback_port=${1:-5180}
|
||||
|
||||
local api_key=$(try_oauth_flow "$callback_port")
|
||||
|
||||
if [[ -n "$api_key" ]]; then
|
||||
echo "$api_key"
|
||||
return 0
|
||||
fi
|
||||
|
||||
echo ""
|
||||
log_warn "OAuth authentication failed or unavailable"
|
||||
log_warn "You can enter your API key manually instead"
|
||||
echo ""
|
||||
local manual_choice=$(safe_read "Would you like to enter your API key manually? (Y/n): ") || {
|
||||
log_error "Cannot prompt for manual entry in non-interactive mode"
|
||||
log_warn "Set OPENROUTER_API_KEY environment variable for non-interactive usage"
|
||||
return 1
|
||||
}
|
||||
|
||||
if [[ ! "$manual_choice" =~ ^[Nn]$ ]]; then
|
||||
api_key=$(get_openrouter_api_key_manual)
|
||||
echo "$api_key"
|
||||
return 0
|
||||
else
|
||||
log_error "Authentication cancelled by user"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# ============================================================
|
||||
# DigitalOcean specific functions
|
||||
# ============================================================
|
||||
|
||||
DO_API_BASE="https://api.digitalocean.com/v2"
|
||||
SSH_OPTS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR -i $HOME/.ssh/id_ed25519"
|
||||
|
||||
# Centralized curl wrapper for DigitalOcean API
|
||||
do_api() {
|
||||
local method="$1"
|
||||
local endpoint="$2"
|
||||
local body="$3"
|
||||
|
||||
local args=(
|
||||
-s
|
||||
-X "$method"
|
||||
-H "Authorization: Bearer ${DO_API_TOKEN}"
|
||||
-H "Content-Type: application/json"
|
||||
)
|
||||
|
||||
if [[ -n "$body" ]]; then
|
||||
args+=(-d "$body")
|
||||
fi
|
||||
|
||||
curl "${args[@]}" "${DO_API_BASE}${endpoint}"
|
||||
}
|
||||
|
||||
# Ensure DO_API_TOKEN is available (env var -> config file -> prompt+save)
|
||||
ensure_do_token() {
|
||||
# 1. Check environment variable
|
||||
if [[ -n "$DO_API_TOKEN" ]]; then
|
||||
log_info "Using DigitalOcean API token from environment"
|
||||
return 0
|
||||
fi
|
||||
|
||||
# 2. Check config file
|
||||
local config_dir="$HOME/.config/spawn"
|
||||
local config_file="$config_dir/digitalocean.json"
|
||||
if [[ -f "$config_file" ]]; then
|
||||
local saved_token=$(python3 -c "import json; print(json.load(open('$config_file')).get('token',''))" 2>/dev/null)
|
||||
if [[ -n "$saved_token" ]]; then
|
||||
export DO_API_TOKEN="$saved_token"
|
||||
log_info "Using DigitalOcean API token from $config_file"
|
||||
return 0
|
||||
fi
|
||||
fi
|
||||
|
||||
# 3. Prompt and save
|
||||
echo ""
|
||||
log_warn "DigitalOcean API Token Required"
|
||||
echo -e "${YELLOW}Get your token from: https://cloud.digitalocean.com/account/api/tokens${NC}"
|
||||
echo ""
|
||||
|
||||
local token=$(safe_read "Enter your DigitalOcean API token: ") || return 1
|
||||
if [[ -z "$token" ]]; then
|
||||
log_error "API token is required"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Validate token
|
||||
export DO_API_TOKEN="$token"
|
||||
local test_response=$(do_api GET "/account")
|
||||
if echo "$test_response" | grep -q '"id"'; then
|
||||
log_info "API token validated"
|
||||
else
|
||||
log_error "Invalid API token"
|
||||
unset DO_API_TOKEN
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Save to config file
|
||||
mkdir -p "$config_dir"
|
||||
cat > "$config_file" << EOF
|
||||
{
|
||||
"token": "$token"
|
||||
}
|
||||
EOF
|
||||
chmod 600 "$config_file"
|
||||
log_info "API token saved to $config_file"
|
||||
}
|
||||
|
||||
# Ensure SSH key exists locally and is registered with DigitalOcean
|
||||
ensure_ssh_key() {
|
||||
local key_path="$HOME/.ssh/id_ed25519"
|
||||
local pub_path="${key_path}.pub"
|
||||
|
||||
# Generate SSH key if it doesn't exist
|
||||
if [[ ! -f "$key_path" ]]; then
|
||||
log_warn "Generating SSH key..."
|
||||
mkdir -p "$HOME/.ssh"
|
||||
ssh-keygen -t ed25519 -f "$key_path" -N "" -q
|
||||
log_info "SSH key generated at $key_path"
|
||||
fi
|
||||
|
||||
local pub_key=$(cat "$pub_path")
|
||||
local key_name="spawn-$(hostname)-$(date +%s)"
|
||||
|
||||
# Check if this key is already registered
|
||||
local existing_fingerprint=$(ssh-keygen -lf "$pub_path" -E md5 2>/dev/null | awk '{print $2}' | sed 's/MD5://')
|
||||
local existing_keys=$(do_api GET "/account/keys")
|
||||
|
||||
if echo "$existing_keys" | grep -q "$existing_fingerprint"; then
|
||||
log_info "SSH key already registered with DigitalOcean"
|
||||
return 0
|
||||
fi
|
||||
|
||||
# Register the key
|
||||
log_warn "Registering SSH key with DigitalOcean..."
|
||||
local json_pub_key=$(python3 -c "import json; print(json.dumps('$pub_key'))" 2>/dev/null || echo "\"$pub_key\"")
|
||||
local register_body="{\"name\":\"$key_name\",\"public_key\":$json_pub_key}"
|
||||
local register_response=$(do_api POST "/account/keys" "$register_body")
|
||||
|
||||
if echo "$register_response" | grep -q '"id"'; then
|
||||
log_info "SSH key registered with DigitalOcean"
|
||||
else
|
||||
log_error "Failed to register SSH key: $register_response"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Get server name from env var or prompt
|
||||
get_server_name() {
|
||||
if [[ -n "$DO_DROPLET_NAME" ]]; then
|
||||
log_info "Using droplet name from environment: $DO_DROPLET_NAME"
|
||||
echo "$DO_DROPLET_NAME"
|
||||
return 0
|
||||
fi
|
||||
|
||||
local server_name=$(safe_read "Enter droplet name: ")
|
||||
if [[ -z "$server_name" ]]; then
|
||||
log_error "Droplet name is required"
|
||||
log_warn "Set DO_DROPLET_NAME environment variable for non-interactive usage:"
|
||||
log_warn " DO_DROPLET_NAME=dev-mk1 curl ... | bash"
|
||||
return 1
|
||||
fi
|
||||
|
||||
echo "$server_name"
|
||||
}
|
||||
|
||||
# Generate cloud-init userdata YAML
|
||||
get_cloud_init_userdata() {
|
||||
cat << 'CLOUD_INIT_EOF'
|
||||
#cloud-config
|
||||
package_update: true
|
||||
packages:
|
||||
- curl
|
||||
- unzip
|
||||
- git
|
||||
- zsh
|
||||
|
||||
runcmd:
|
||||
# Install Bun
|
||||
- su - root -c 'curl -fsSL https://bun.sh/install | bash'
|
||||
# Install Claude Code
|
||||
- su - root -c 'curl -fsSL https://claude.ai/install.sh | bash'
|
||||
# Configure PATH in .bashrc
|
||||
- echo 'export PATH="$HOME/.claude/local/bin:$HOME/.bun/bin:$PATH"' >> /root/.bashrc
|
||||
# Configure PATH in .zshrc
|
||||
- echo 'export PATH="$HOME/.claude/local/bin:$HOME/.bun/bin:$PATH"' >> /root/.zshrc
|
||||
# Signal completion
|
||||
- touch /root/.cloud-init-complete
|
||||
CLOUD_INIT_EOF
|
||||
}
|
||||
|
||||
# Create a DigitalOcean droplet with cloud-init
|
||||
create_server() {
|
||||
local name="$1"
|
||||
local size="${DO_DROPLET_SIZE:-s-2vcpu-2gb}"
|
||||
local region="${DO_REGION:-nyc3}"
|
||||
local image="ubuntu-24-04-x64"
|
||||
|
||||
log_warn "Creating DigitalOcean droplet '$name' (size: $size, region: $region)..."
|
||||
|
||||
# Get all SSH key IDs
|
||||
local ssh_keys_response=$(do_api GET "/account/keys")
|
||||
local ssh_key_ids=$(python3 -c "
|
||||
import json, sys
|
||||
data = json.loads(sys.stdin.read())
|
||||
ids = [k['id'] for k in data.get('ssh_keys', [])]
|
||||
print(json.dumps(ids))
|
||||
" <<< "$ssh_keys_response")
|
||||
|
||||
# JSON-escape the cloud-init userdata
|
||||
local userdata=$(get_cloud_init_userdata)
|
||||
local userdata_json=$(python3 -c "import json,sys; print(json.dumps(sys.stdin.read()))" <<< "$userdata")
|
||||
|
||||
local body=$(python3 -c "
|
||||
import json
|
||||
body = {
|
||||
'name': '$name',
|
||||
'region': '$region',
|
||||
'size': '$size',
|
||||
'image': '$image',
|
||||
'ssh_keys': $ssh_key_ids,
|
||||
'user_data': json.loads($userdata_json),
|
||||
'backups': False,
|
||||
'monitoring': False
|
||||
}
|
||||
print(json.dumps(body))
|
||||
")
|
||||
|
||||
local response=$(do_api POST "/droplets" "$body")
|
||||
|
||||
# Check for errors
|
||||
if echo "$response" | grep -q '"id"' && echo "$response" | grep -q '"droplet"'; then
|
||||
DO_DROPLET_ID=$(echo "$response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['droplet']['id'])")
|
||||
export DO_DROPLET_ID
|
||||
log_info "Droplet created: ID=$DO_DROPLET_ID"
|
||||
else
|
||||
local error_msg=$(echo "$response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read()).get('message','Unknown error'))" 2>/dev/null || echo "$response")
|
||||
log_error "Failed to create droplet: $error_msg"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Wait for droplet to get an IP (poll until active)
|
||||
log_warn "Waiting for droplet to become active..."
|
||||
local max_attempts=60
|
||||
local attempt=1
|
||||
while [[ $attempt -le $max_attempts ]]; do
|
||||
local status_response=$(do_api GET "/droplets/$DO_DROPLET_ID")
|
||||
local status=$(echo "$status_response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['droplet']['status'])")
|
||||
|
||||
if [[ "$status" == "active" ]]; then
|
||||
DO_SERVER_IP=$(echo "$status_response" | python3 -c "
|
||||
import json, sys
|
||||
data = json.loads(sys.stdin.read())
|
||||
for net in data['droplet']['networks']['v4']:
|
||||
if net['type'] == 'public':
|
||||
print(net['ip_address'])
|
||||
break
|
||||
")
|
||||
export DO_SERVER_IP
|
||||
log_info "Droplet active: IP=$DO_SERVER_IP"
|
||||
return 0
|
||||
fi
|
||||
|
||||
log_warn "Droplet status: $status ($attempt/$max_attempts)"
|
||||
sleep 5
|
||||
((attempt++))
|
||||
done
|
||||
|
||||
log_error "Droplet did not become active in time"
|
||||
return 1
|
||||
}
|
||||
|
||||
# Wait for SSH connectivity
|
||||
verify_server_connectivity() {
|
||||
local ip="$1"
|
||||
local max_attempts=${2:-30}
|
||||
local attempt=1
|
||||
|
||||
log_warn "Waiting for SSH connectivity to $ip..."
|
||||
while [[ $attempt -le $max_attempts ]]; do
|
||||
if ssh $SSH_OPTS -o ConnectTimeout=5 "root@$ip" "echo ok" >/dev/null 2>&1; then
|
||||
log_info "SSH connection established"
|
||||
return 0
|
||||
fi
|
||||
log_warn "Waiting for SSH... ($attempt/$max_attempts)"
|
||||
sleep 5
|
||||
((attempt++))
|
||||
done
|
||||
|
||||
log_error "Server failed to respond via SSH after $max_attempts attempts"
|
||||
return 1
|
||||
}
|
||||
|
||||
# Wait for cloud-init to complete
|
||||
wait_for_cloud_init() {
|
||||
local ip="$1"
|
||||
local max_attempts=${2:-60}
|
||||
local attempt=1
|
||||
|
||||
log_warn "Waiting for cloud-init to complete..."
|
||||
while [[ $attempt -le $max_attempts ]]; do
|
||||
if ssh $SSH_OPTS "root@$ip" "test -f /root/.cloud-init-complete" >/dev/null 2>&1; then
|
||||
log_info "Cloud-init completed"
|
||||
return 0
|
||||
fi
|
||||
log_warn "Cloud-init in progress... ($attempt/$max_attempts)"
|
||||
sleep 5
|
||||
((attempt++))
|
||||
done
|
||||
|
||||
log_error "Cloud-init did not complete after $max_attempts attempts"
|
||||
return 1
|
||||
}
|
||||
|
||||
# Run a command on the server
|
||||
run_server() {
|
||||
local ip="$1"
|
||||
local cmd="$2"
|
||||
ssh $SSH_OPTS "root@$ip" "$cmd"
|
||||
}
|
||||
|
||||
# Upload a file to the server
|
||||
upload_file() {
|
||||
local ip="$1"
|
||||
local local_path="$2"
|
||||
local remote_path="$3"
|
||||
scp $SSH_OPTS "$local_path" "root@$ip:$remote_path"
|
||||
}
|
||||
|
||||
# Start an interactive SSH session
|
||||
interactive_session() {
|
||||
local ip="$1"
|
||||
local cmd="$2"
|
||||
ssh -t $SSH_OPTS "root@$ip" "$cmd"
|
||||
}
|
||||
|
||||
# Destroy a DigitalOcean droplet
|
||||
destroy_server() {
|
||||
local droplet_id="$1"
|
||||
|
||||
log_warn "Destroying droplet $droplet_id..."
|
||||
local response=$(do_api DELETE "/droplets/$droplet_id")
|
||||
|
||||
# DELETE returns 204 No Content on success (empty body)
|
||||
log_info "Droplet $droplet_id destroyed"
|
||||
}
|
||||
|
||||
# List all DigitalOcean droplets
|
||||
list_servers() {
|
||||
local response=$(do_api GET "/droplets")
|
||||
|
||||
python3 -c "
|
||||
import json, sys
|
||||
data = json.loads(sys.stdin.read())
|
||||
droplets = data.get('droplets', [])
|
||||
if not droplets:
|
||||
print('No droplets found')
|
||||
sys.exit(0)
|
||||
print(f\"{'NAME':<25} {'ID':<12} {'STATUS':<12} {'IP':<16} {'SIZE':<15}\")
|
||||
print('-' * 80)
|
||||
for d in droplets:
|
||||
name = d['name']
|
||||
did = str(d['id'])
|
||||
status = d['status']
|
||||
ip = 'N/A'
|
||||
for net in d.get('networks', {}).get('v4', []):
|
||||
if net['type'] == 'public':
|
||||
ip = net['ip_address']
|
||||
break
|
||||
size = d['size_slug']
|
||||
print(f'{name:<25} {did:<12} {status:<12} {ip:<16} {size:<15}')
|
||||
" <<< "$response"
|
||||
}
|
||||
81
digitalocean/nanoclaw.sh
Executable file
81
digitalocean/nanoclaw.sh
Executable file
|
|
@ -0,0 +1,81 @@
|
|||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Source common functions - try local file first, fall back to remote
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
|
||||
if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
|
||||
source "$SCRIPT_DIR/lib/common.sh"
|
||||
else
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/digitalocean/lib/common.sh)
|
||||
fi
|
||||
|
||||
log_info "NanoClaw on DigitalOcean"
|
||||
echo ""
|
||||
|
||||
# 1. Resolve DigitalOcean API token
|
||||
ensure_do_token
|
||||
|
||||
# 2. Generate + register SSH key
|
||||
ensure_ssh_key
|
||||
|
||||
# 3. Get droplet name and create droplet
|
||||
DROPLET_NAME=$(get_server_name)
|
||||
create_server "$DROPLET_NAME"
|
||||
|
||||
# 4. Wait for SSH and cloud-init
|
||||
verify_server_connectivity "$DO_SERVER_IP"
|
||||
wait_for_cloud_init "$DO_SERVER_IP"
|
||||
|
||||
# 5. Install Node.js deps and clone nanoclaw
|
||||
log_warn "Installing tsx..."
|
||||
run_server "$DO_SERVER_IP" "source ~/.bashrc && bun install -g tsx"
|
||||
|
||||
log_warn "Cloning and building nanoclaw..."
|
||||
run_server "$DO_SERVER_IP" "git clone https://github.com/gavrielc/nanoclaw.git ~/nanoclaw && cd ~/nanoclaw && npm install && npm run build"
|
||||
log_info "NanoClaw installed"
|
||||
|
||||
# 6. Get OpenRouter API key
|
||||
echo ""
|
||||
if [[ -n "$OPENROUTER_API_KEY" ]]; then
|
||||
log_info "Using OpenRouter API key from environment"
|
||||
else
|
||||
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
|
||||
fi
|
||||
|
||||
# 7. Inject environment variables into ~/.zshrc
|
||||
log_warn "Setting up environment variables..."
|
||||
|
||||
ENV_TEMP=$(mktemp)
|
||||
cat > "$ENV_TEMP" << EOF
|
||||
|
||||
# [spawn:env]
|
||||
export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
|
||||
export ANTHROPIC_API_KEY="${OPENROUTER_API_KEY}"
|
||||
export ANTHROPIC_BASE_URL="https://openrouter.ai/api"
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
|
||||
run_server "$DO_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
|
||||
rm "$ENV_TEMP"
|
||||
|
||||
# 8. Create nanoclaw .env file
|
||||
log_warn "Configuring nanoclaw..."
|
||||
|
||||
DOTENV_TEMP=$(mktemp)
|
||||
cat > "$DOTENV_TEMP" << EOF
|
||||
ANTHROPIC_API_KEY=${OPENROUTER_API_KEY}
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$DOTENV_TEMP" "/root/nanoclaw/.env"
|
||||
rm "$DOTENV_TEMP"
|
||||
|
||||
echo ""
|
||||
log_info "DigitalOcean droplet setup completed successfully!"
|
||||
log_info "Droplet: $DROPLET_NAME (ID: $DO_DROPLET_ID, IP: $DO_SERVER_IP)"
|
||||
echo ""
|
||||
|
||||
# 9. Start nanoclaw
|
||||
log_warn "Starting nanoclaw..."
|
||||
log_warn "You will need to scan a WhatsApp QR code to authenticate."
|
||||
echo ""
|
||||
interactive_session "$DO_SERVER_IP" "cd ~/nanoclaw && source ~/.zshrc && npm run dev"
|
||||
106
digitalocean/openclaw.sh
Executable file
106
digitalocean/openclaw.sh
Executable file
|
|
@ -0,0 +1,106 @@
|
|||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Source common functions - try local file first, fall back to remote
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
|
||||
if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
|
||||
source "$SCRIPT_DIR/lib/common.sh"
|
||||
else
|
||||
source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/digitalocean/lib/common.sh)
|
||||
fi
|
||||
|
||||
log_info "OpenClaw on DigitalOcean"
|
||||
echo ""
|
||||
|
||||
# 1. Resolve DigitalOcean API token
|
||||
ensure_do_token
|
||||
|
||||
# 2. Generate + register SSH key
|
||||
ensure_ssh_key
|
||||
|
||||
# 3. Get droplet name and create droplet
|
||||
DROPLET_NAME=$(get_server_name)
|
||||
create_server "$DROPLET_NAME"
|
||||
|
||||
# 4. Wait for SSH and cloud-init
|
||||
verify_server_connectivity "$DO_SERVER_IP"
|
||||
wait_for_cloud_init "$DO_SERVER_IP"
|
||||
|
||||
# 5. Install openclaw via bun
|
||||
log_warn "Installing openclaw..."
|
||||
run_server "$DO_SERVER_IP" "source ~/.bashrc && bun install -g openclaw"
|
||||
log_info "OpenClaw installed"
|
||||
|
||||
# 6. Get OpenRouter API key
|
||||
echo ""
|
||||
if [[ -n "$OPENROUTER_API_KEY" ]]; then
|
||||
log_info "Using OpenRouter API key from environment"
|
||||
else
|
||||
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
|
||||
fi
|
||||
|
||||
# 7. Get model preference
|
||||
echo ""
|
||||
log_warn "Browse models at: https://openrouter.ai/models"
|
||||
log_warn "Which model would you like to use?"
|
||||
MODEL_ID=$(safe_read "Enter model ID [openrouter/auto]: ") || MODEL_ID=""
|
||||
MODEL_ID="${MODEL_ID:-openrouter/auto}"
|
||||
|
||||
# 8. Inject environment variables into ~/.zshrc
|
||||
log_warn "Setting up environment variables..."
|
||||
|
||||
ENV_TEMP=$(mktemp)
|
||||
cat > "$ENV_TEMP" << EOF
|
||||
|
||||
# [spawn:env]
|
||||
export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
|
||||
export ANTHROPIC_API_KEY="${OPENROUTER_API_KEY}"
|
||||
export ANTHROPIC_BASE_URL="https://openrouter.ai/api"
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
|
||||
run_server "$DO_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
|
||||
rm "$ENV_TEMP"
|
||||
|
||||
# 9. Configure openclaw
|
||||
log_warn "Configuring openclaw..."
|
||||
|
||||
run_server "$DO_SERVER_IP" "rm -rf ~/.openclaw && mkdir -p ~/.openclaw"
|
||||
|
||||
GATEWAY_TOKEN=$(openssl rand -hex 16)
|
||||
|
||||
OPENCLAW_CONFIG_TEMP=$(mktemp)
|
||||
cat > "$OPENCLAW_CONFIG_TEMP" << EOF
|
||||
{
|
||||
"env": {
|
||||
"OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}"
|
||||
},
|
||||
"gateway": {
|
||||
"mode": "local",
|
||||
"auth": {
|
||||
"token": "${GATEWAY_TOKEN}"
|
||||
}
|
||||
},
|
||||
"agents": {
|
||||
"defaults": {
|
||||
"model": {
|
||||
"primary": "openrouter/${MODEL_ID}"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
upload_file "$DO_SERVER_IP" "$OPENCLAW_CONFIG_TEMP" "/root/.openclaw/openclaw.json"
|
||||
rm "$OPENCLAW_CONFIG_TEMP"
|
||||
|
||||
echo ""
|
||||
log_info "DigitalOcean droplet setup completed successfully!"
|
||||
log_info "Droplet: $DROPLET_NAME (ID: $DO_DROPLET_ID, IP: $DO_SERVER_IP)"
|
||||
echo ""
|
||||
|
||||
# 10. Start openclaw gateway in background and launch TUI
|
||||
log_warn "Starting openclaw..."
|
||||
run_server "$DO_SERVER_IP" "source ~/.zshrc && nohup openclaw gateway > /tmp/openclaw-gateway.log 2>&1 &"
|
||||
sleep 2
|
||||
interactive_session "$DO_SERVER_IP" "source ~/.zshrc && openclaw tui"
|
||||
|
|
@ -92,6 +92,21 @@
|
|||
"location": "fsn1",
|
||||
"image": "ubuntu-24.04"
|
||||
}
|
||||
},
|
||||
"digitalocean": {
|
||||
"name": "DigitalOcean",
|
||||
"description": "DigitalOcean Droplets via REST API",
|
||||
"url": "https://www.digitalocean.com/",
|
||||
"type": "api",
|
||||
"auth": "DO_API_TOKEN",
|
||||
"provision_method": "POST /v2/droplets with user_data",
|
||||
"exec_method": "ssh root@IP",
|
||||
"interactive_method": "ssh -t root@IP",
|
||||
"defaults": {
|
||||
"size": "s-2vcpu-2gb",
|
||||
"region": "nyc3",
|
||||
"image": "ubuntu-24-04-x64"
|
||||
}
|
||||
}
|
||||
},
|
||||
"matrix": {
|
||||
|
|
@ -100,6 +115,9 @@
|
|||
"sprite/nanoclaw": "implemented",
|
||||
"hetzner/claude": "implemented",
|
||||
"hetzner/openclaw": "implemented",
|
||||
"hetzner/nanoclaw": "implemented"
|
||||
"hetzner/nanoclaw": "implemented",
|
||||
"digitalocean/claude": "implemented",
|
||||
"digitalocean/openclaw": "implemented",
|
||||
"digitalocean/nanoclaw": "implemented"
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue