Add Linode (Akamai) as fifth cloud provider with all 6 agents (#12)

Linode instances via REST API v4, with cloud-init via metadata.user_data. - linode/lib/common.sh: API wrapper, token management, instance lifecycle - All 6 agents: claude, openclaw, nanoclaw, aider, goose, codex Matrix now 6 agents x 5 clouds = 30/30 implemented. Co-authored-by: Sprite <noreply@sprite.dev> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-19 08:01:17 +00:00 · 2026-02-07 09:26:31 -08:00 · 2026-02-07 09:26:31 -08:00 · e781506604
commit e781506604
parent 5a2f82cdbe
9 changed files with 708 additions and 1 deletions
--- a/README.md
+++ b/README.md
@ -258,3 +258,63 @@ OPENROUTER_API_KEY=sk-or-v1-xxxxx \
 - `OPENROUTER_API_KEY` - Skip OAuth and use this API key directly
 - `VULTR_PLAN` - Instance plan (default: `vc2-1c-2gb`)
 - `VULTR_REGION` - Datacenter region (default: `ewr`)
+
+---
+
+## Linode (Akamai)
+
+Spawn agents on [Linode](https://www.linode.com/) instances via REST API.
+
+### Usage
+
+#### Claude Code
+
+```bash
+bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/claude.sh)
+```
+
+#### OpenClaw
+
+```bash
+bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/openclaw.sh)
+```
+
+#### NanoClaw
+
+```bash
+bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/nanoclaw.sh)
+```
+
+#### Aider
+
+```bash
+bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/aider.sh)
+```
+
+#### Goose
+
+```bash
+bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/goose.sh)
+```
+
+#### Codex CLI
+
+```bash
+bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/codex.sh)
+```
+
+### Non-Interactive Mode
+
+```bash
+LINODE_SERVER_NAME=dev-mk1 \
+LINODE_API_TOKEN=your-linode-api-token \
+OPENROUTER_API_KEY=sk-or-v1-xxxxx \
+  bash <(curl -fsSL https://openrouter.ai/lab/spawn/linode/claude.sh)
+```
+
+**Environment Variables:**
+- `LINODE_SERVER_NAME` - Label for the Linode (skips prompt)
+- `LINODE_API_TOKEN` - Linode API token (skips prompt, saved to `~/.config/spawn/linode.json`)
+- `OPENROUTER_API_KEY` - Skip OAuth and use this API key directly
+- `LINODE_TYPE` - Instance type (default: `g6-standard-1`)
+- `LINODE_REGION` - Datacenter region (default: `us-east`)
--- a/linode/aider.sh
+++ b/linode/aider.sh
@ -0,0 +1,40 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
+if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
+else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
+log_info "Aider on Linode"
+echo ""
+ensure_linode_token
+ensure_ssh_key
+SERVER_NAME=$(get_server_name)
+create_server "$SERVER_NAME"
+verify_server_connectivity "$LINODE_SERVER_IP"
+wait_for_cloud_init "$LINODE_SERVER_IP"
+log_warn "Installing Aider..."
+run_server "$LINODE_SERVER_IP" "pip install aider-chat 2>/dev/null || pip3 install aider-chat"
+log_info "Aider installed"
+echo ""
+if [[ -n "$OPENROUTER_API_KEY" ]]; then log_info "Using OpenRouter API key from environment"
+else OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180); fi
+echo ""
+log_warn "Browse models at: https://openrouter.ai/models"
+MODEL_ID=$(safe_read "Enter model ID [openrouter/auto]: ") || MODEL_ID=""
+MODEL_ID="${MODEL_ID:-openrouter/auto}"
+log_warn "Setting up environment variables..."
+ENV_TEMP=$(mktemp)
+cat > "$ENV_TEMP" << EOF
+
+# [spawn:env]
+export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
+EOF
+upload_file "$LINODE_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
+run_server "$LINODE_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
+rm "$ENV_TEMP"
+echo ""
+log_info "Linode setup completed successfully!"
+echo ""
+log_warn "Starting Aider..."
+sleep 1
+clear
+interactive_session "$LINODE_SERVER_IP" "source ~/.zshrc && aider --model openrouter/${MODEL_ID}"
--- a/linode/claude.sh
+++ b/linode/claude.sh
@ -0,0 +1,75 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
+if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
+else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
+log_info "Claude Code on Linode"
+echo ""
+ensure_linode_token
+ensure_ssh_key
+SERVER_NAME=$(get_server_name)
+create_server "$SERVER_NAME"
+verify_server_connectivity "$LINODE_SERVER_IP"
+wait_for_cloud_init "$LINODE_SERVER_IP"
+log_warn "Verifying Claude Code installation..."
+if ! run_server "$LINODE_SERVER_IP" "command -v claude" >/dev/null 2>&1; then
+    log_warn "Claude Code not found, installing manually..."
+    run_server "$LINODE_SERVER_IP" "curl -fsSL https://claude.ai/install.sh | bash"
+fi
+log_info "Claude Code is installed"
+echo ""
+if [[ -n "$OPENROUTER_API_KEY" ]]; then log_info "Using OpenRouter API key from environment"
+else OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180); fi
+log_warn "Setting up environment variables..."
+ENV_TEMP=$(mktemp)
+cat > "$ENV_TEMP" << EOF
+
+# [spawn:env]
+export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
+export ANTHROPIC_BASE_URL="https://openrouter.ai/api"
+export ANTHROPIC_AUTH_TOKEN="${OPENROUTER_API_KEY}"
+export ANTHROPIC_API_KEY=""
+export CLAUDE_CODE_SKIP_ONBOARDING="1"
+export CLAUDE_CODE_ENABLE_TELEMETRY="0"
+EOF
+upload_file "$LINODE_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
+run_server "$LINODE_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
+rm "$ENV_TEMP"
+log_warn "Configuring Claude Code..."
+run_server "$LINODE_SERVER_IP" "mkdir -p ~/.claude"
+SETTINGS_TEMP=$(mktemp)
+cat > "$SETTINGS_TEMP" << EOF
+{
+  "theme": "dark",
+  "editor": "vim",
+  "env": {
+    "CLAUDE_CODE_ENABLE_TELEMETRY": "0",
+    "ANTHROPIC_BASE_URL": "https://openrouter.ai/api",
+    "ANTHROPIC_AUTH_TOKEN": "${OPENROUTER_API_KEY}"
+  },
+  "permissions": {
+    "defaultMode": "bypassPermissions",
+    "dangerouslySkipPermissions": true
+  }
+}
+EOF
+upload_file "$LINODE_SERVER_IP" "$SETTINGS_TEMP" "/root/.claude/settings.json"
+rm "$SETTINGS_TEMP"
+GLOBAL_STATE_TEMP=$(mktemp)
+cat > "$GLOBAL_STATE_TEMP" << EOF
+{
+  "hasCompletedOnboarding": true,
+  "bypassPermissionsModeAccepted": true
+}
+EOF
+upload_file "$LINODE_SERVER_IP" "$GLOBAL_STATE_TEMP" "/root/.claude.json"
+rm "$GLOBAL_STATE_TEMP"
+run_server "$LINODE_SERVER_IP" "touch ~/.claude/CLAUDE.md"
+echo ""
+log_info "Linode setup completed successfully!"
+log_info "Server: $SERVER_NAME (ID: $LINODE_SERVER_ID, IP: $LINODE_SERVER_IP)"
+echo ""
+log_warn "Starting Claude Code..."
+sleep 1
+clear
+interactive_session "$LINODE_SERVER_IP" "source ~/.zshrc && claude"
--- a/linode/codex.sh
+++ b/linode/codex.sh
@ -0,0 +1,38 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
+if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
+else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
+log_info "Codex CLI on Linode"
+echo ""
+ensure_linode_token
+ensure_ssh_key
+SERVER_NAME=$(get_server_name)
+create_server "$SERVER_NAME"
+verify_server_connectivity "$LINODE_SERVER_IP"
+wait_for_cloud_init "$LINODE_SERVER_IP"
+log_warn "Installing Codex CLI..."
+run_server "$LINODE_SERVER_IP" "npm install -g @openai/codex"
+log_info "Codex CLI installed"
+echo ""
+if [[ -n "$OPENROUTER_API_KEY" ]]; then log_info "Using OpenRouter API key from environment"
+else OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180); fi
+log_warn "Setting up environment variables..."
+ENV_TEMP=$(mktemp)
+cat > "$ENV_TEMP" << EOF
+
+# [spawn:env]
+export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
+export OPENAI_API_KEY="${OPENROUTER_API_KEY}"
+export OPENAI_BASE_URL="https://openrouter.ai/api/v1"
+EOF
+upload_file "$LINODE_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
+run_server "$LINODE_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
+rm "$ENV_TEMP"
+echo ""
+log_info "Linode setup completed successfully!"
+echo ""
+log_warn "Starting Codex..."
+sleep 1
+clear
+interactive_session "$LINODE_SERVER_IP" "source ~/.zshrc && codex"
--- a/linode/goose.sh
+++ b/linode/goose.sh
@ -0,0 +1,37 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
+if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
+else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
+log_info "Goose on Linode"
+echo ""
+ensure_linode_token
+ensure_ssh_key
+SERVER_NAME=$(get_server_name)
+create_server "$SERVER_NAME"
+verify_server_connectivity "$LINODE_SERVER_IP"
+wait_for_cloud_init "$LINODE_SERVER_IP"
+log_warn "Installing Goose..."
+run_server "$LINODE_SERVER_IP" "CONFIGURE=false curl -fsSL https://github.com/block/goose/releases/latest/download/download_cli.sh | bash"
+log_info "Goose installed"
+echo ""
+if [[ -n "$OPENROUTER_API_KEY" ]]; then log_info "Using OpenRouter API key from environment"
+else OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180); fi
+log_warn "Setting up environment variables..."
+ENV_TEMP=$(mktemp)
+cat > "$ENV_TEMP" << EOF
+
+# [spawn:env]
+export GOOSE_PROVIDER=openrouter
+export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
+EOF
+upload_file "$LINODE_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
+run_server "$LINODE_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
+rm "$ENV_TEMP"
+echo ""
+log_info "Linode setup completed successfully!"
+echo ""
+log_warn "Starting Goose..."
+sleep 1
+clear
+interactive_session "$LINODE_SERVER_IP" "source ~/.zshrc && goose"
--- a/linode/lib/common.sh
+++ b/linode/lib/common.sh
@ -0,0 +1,333 @@
+#!/bin/bash
+# Common bash functions for Linode (Akamai) spawn scripts
+
+# ============================================================
+# Provider-agnostic functions
+# ============================================================
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+log_info() { echo -e "${GREEN}$1${NC}" >&2; }
+log_warn() { echo -e "${YELLOW}$1${NC}" >&2; }
+log_error() { echo -e "${RED}$1${NC}" >&2; }
+
+safe_read() {
+    local prompt="$1" result=""
+    if [[ -t 0 ]]; then read -p "$prompt" result
+    elif echo -n "" > /dev/tty 2>/dev/null; then read -p "$prompt" result < /dev/tty
+    else log_error "Cannot read input: no TTY available"; return 1; fi
+    echo "$result"
+}
+
+nc_listen() {
+    local port=$1; shift
+    if nc --help 2>&1 | grep -q "BusyBox\|busybox" || nc --help 2>&1 | grep -q "\-p "; then
+        nc -l -p "$port" "$@"
+    else nc -l "$port" "$@"; fi
+}
+
+open_browser() {
+    local url=$1
+    if command -v termux-open-url &>/dev/null; then termux-open-url "$url" </dev/null
+    elif command -v open &>/dev/null; then open "$url" </dev/null
+    elif command -v xdg-open &>/dev/null; then xdg-open "$url" </dev/null
+    else log_warn "Please open: ${url}"; fi
+}
+
+get_openrouter_api_key_manual() {
+    echo ""; log_warn "Manual API Key Entry"
+    echo -e "${YELLOW}Get your API key from: https://openrouter.ai/settings/keys${NC}"; echo ""
+    local api_key=""
+    while [[ -z "$api_key" ]]; do
+        api_key=$(safe_read "Enter your OpenRouter API key: ") || return 1
+        if [[ -z "$api_key" ]]; then log_error "API key cannot be empty"
+        elif [[ ! "$api_key" =~ ^sk-or-v1-[a-f0-9]{64}$ ]]; then
+            log_warn "Warning: API key format doesn't match expected pattern (sk-or-v1-...)"
+            local confirm=$(safe_read "Use this key anyway? (y/N): ") || return 1
+            if [[ "$confirm" =~ ^[Yy]$ ]]; then break; else api_key=""; fi
+        fi
+    done
+    log_info "API key accepted!"; echo "$api_key"
+}
+
+try_oauth_flow() {
+    local callback_port=${1:-5180}
+    log_warn "Attempting OAuth authentication..."
+    if ! command -v nc &>/dev/null; then log_warn "netcat (nc) not found"; return 1; fi
+    local callback_url="http://localhost:${callback_port}/callback"
+    local auth_url="https://openrouter.ai/auth?callback_url=${callback_url}"
+    local oauth_dir=$(mktemp -d) code_file="$oauth_dir/code"
+    log_warn "Starting local OAuth server on port ${callback_port}..."
+    (
+        local success_response='HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<html><head><style>@keyframes checkmark{0%{transform:scale(0) rotate(-45deg);opacity:0}60%{transform:scale(1.2) rotate(-45deg);opacity:1}100%{transform:scale(1) rotate(-45deg);opacity:1}}body{font-family:system-ui,-apple-system,sans-serif;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#1a1a2e}.card{text-align:center;color:#fff}.check{width:80px;height:80px;border-radius:50%;background:#00d4aa22;display:flex;align-items:center;justify-content:center;margin:0 auto 24px}.check::after{content:"";display:block;width:28px;height:14px;border-left:4px solid #00d4aa;border-bottom:4px solid #00d4aa;animation:checkmark .5s ease forwards}h1{color:#00d4aa;margin:0 0 8px;font-size:1.6rem}p{margin:0 0 6px;color:#ffffffcc;font-size:1rem}</style></head><body><div class="card"><div class="check"></div><h1>Authentication Successful!</h1><p>You can close this tab</p></div><script>setTimeout(function(){try{window.close()}catch(e){}},3000)</script></body></html>'
+        while true; do
+            local response_file=$(mktemp); echo -e "$success_response" > "$response_file"
+            local request=$(nc_listen "$callback_port" < "$response_file" 2>/dev/null | head -1)
+            local nc_status=$?; rm -f "$response_file"
+            if [[ $nc_status -ne 0 ]]; then break; fi
+            if [[ "$request" == *"/callback?code="* ]]; then
+                echo "$request" | sed -n 's/.*code=\([^ &]*\).*/\1/p' > "$code_file"; break
+            fi
+        done
+    ) </dev/null &
+    local server_pid=$!; sleep 1
+    if ! kill -0 $server_pid 2>/dev/null; then log_warn "Failed to start OAuth server"; rm -rf "$oauth_dir"; return 1; fi
+    log_warn "Opening browser to authenticate with OpenRouter..."; open_browser "$auth_url"
+    local timeout=120 elapsed=0
+    while [[ ! -f "$code_file" ]] && [[ $elapsed -lt $timeout ]]; do sleep 1; ((elapsed++)); done
+    kill $server_pid 2>/dev/null || true; wait $server_pid 2>/dev/null || true
+    if [[ ! -f "$code_file" ]]; then log_warn "OAuth timeout"; rm -rf "$oauth_dir"; return 1; fi
+    local oauth_code=$(cat "$code_file"); rm -rf "$oauth_dir"
+    log_warn "Exchanging OAuth code for API key..."
+    local key_response=$(curl -s -X POST "https://openrouter.ai/api/v1/auth/keys" \
+        -H "Content-Type: application/json" -d "{\"code\": \"$oauth_code\"}")
+    local api_key=$(echo "$key_response" | grep -o '"key":"[^"]*"' | sed 's/"key":"//;s/"$//')
+    if [[ -z "$api_key" ]]; then log_error "Failed to exchange OAuth code: ${key_response}"; return 1; fi
+    log_info "Successfully obtained OpenRouter API key via OAuth!"; echo "$api_key"
+}
+
+get_openrouter_api_key_oauth() {
+    local callback_port=${1:-5180}
+    local api_key=$(try_oauth_flow "$callback_port")
+    if [[ -n "$api_key" ]]; then echo "$api_key"; return 0; fi
+    echo ""; log_warn "OAuth authentication failed or unavailable"
+    log_warn "You can enter your API key manually instead"; echo ""
+    local manual_choice=$(safe_read "Would you like to enter your API key manually? (Y/n): ") || {
+        log_error "Cannot prompt for manual entry in non-interactive mode"
+        log_warn "Set OPENROUTER_API_KEY environment variable for non-interactive usage"; return 1
+    }
+    if [[ ! "$manual_choice" =~ ^[Nn]$ ]]; then
+        api_key=$(get_openrouter_api_key_manual); echo "$api_key"; return 0
+    else log_error "Authentication cancelled by user"; return 1; fi
+}
+
+# ============================================================
+# Linode (Akamai) specific functions
+# ============================================================
+
+LINODE_API_BASE="https://api.linode.com/v4"
+SSH_OPTS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR -i $HOME/.ssh/id_ed25519"
+
+linode_api() {
+    local method="$1" endpoint="$2" body="$3"
+    local args=(-s -X "$method" -H "Authorization: Bearer ${LINODE_API_TOKEN}" -H "Content-Type: application/json")
+    if [[ -n "$body" ]]; then args+=(-d "$body"); fi
+    curl "${args[@]}" "${LINODE_API_BASE}${endpoint}"
+}
+
+ensure_linode_token() {
+    if [[ -n "$LINODE_API_TOKEN" ]]; then
+        log_info "Using Linode API token from environment"; return 0
+    fi
+    local config_dir="$HOME/.config/spawn" config_file="$config_dir/linode.json"
+    if [[ -f "$config_file" ]]; then
+        local saved_token=$(python3 -c "import json; print(json.load(open('$config_file')).get('token',''))" 2>/dev/null)
+        if [[ -n "$saved_token" ]]; then
+            export LINODE_API_TOKEN="$saved_token"
+            log_info "Using Linode API token from $config_file"; return 0
+        fi
+    fi
+    echo ""; log_warn "Linode API Token Required"
+    echo -e "${YELLOW}Get your token from: https://cloud.linode.com/profile/tokens${NC}"; echo ""
+    local token=$(safe_read "Enter your Linode API token: ") || return 1
+    if [[ -z "$token" ]]; then log_error "API token is required"; return 1; fi
+    export LINODE_API_TOKEN="$token"
+    local test_response=$(linode_api GET "/profile")
+    if echo "$test_response" | grep -q '"username"'; then
+        log_info "API token validated"
+    else log_error "Invalid API token"; unset LINODE_API_TOKEN; return 1; fi
+    mkdir -p "$config_dir"
+    cat > "$config_file" << EOF
+{
+  "token": "$token"
+}
+EOF
+    chmod 600 "$config_file"
+    log_info "API token saved to $config_file"
+}
+
+ensure_ssh_key() {
+    local key_path="$HOME/.ssh/id_ed25519" pub_path="${key_path}.pub"
+    if [[ ! -f "$key_path" ]]; then
+        log_warn "Generating SSH key..."
+        mkdir -p "$HOME/.ssh"
+        ssh-keygen -t ed25519 -f "$key_path" -N "" -q
+        log_info "SSH key generated at $key_path"
+    fi
+    local pub_key=$(cat "$pub_path")
+    local existing_fingerprint=$(ssh-keygen -lf "$pub_path" -E md5 2>/dev/null | awk '{print $2}' | sed 's/MD5://')
+    local existing_keys=$(linode_api GET "/profile/sshkeys")
+    if echo "$existing_keys" | grep -q "$existing_fingerprint"; then
+        log_info "SSH key already registered with Linode"; return 0
+    fi
+    log_warn "Registering SSH key with Linode..."
+    local key_name="spawn-$(hostname)-$(date +%s)"
+    local json_pub_key=$(python3 -c "import json; print(json.dumps('$pub_key'))" 2>/dev/null || echo "\"$pub_key\"")
+    local register_body="{\"label\":\"$key_name\",\"ssh_key\":$json_pub_key}"
+    local register_response=$(linode_api POST "/profile/sshkeys" "$register_body")
+    if echo "$register_response" | grep -q '"id"'; then
+        log_info "SSH key registered with Linode"
+    else log_error "Failed to register SSH key: $register_response"; return 1; fi
+}
+
+get_server_name() {
+    if [[ -n "$LINODE_SERVER_NAME" ]]; then
+        log_info "Using server name from environment: $LINODE_SERVER_NAME"
+        echo "$LINODE_SERVER_NAME"; return 0
+    fi
+    local server_name=$(safe_read "Enter Linode label: ")
+    if [[ -z "$server_name" ]]; then
+        log_error "Server name is required"
+        log_warn "Set LINODE_SERVER_NAME environment variable for non-interactive usage"; return 1
+    fi
+    echo "$server_name"
+}
+
+get_cloud_init_userdata() {
+    cat << 'CLOUD_INIT_EOF'
+#cloud-config
+package_update: true
+packages:
+  - curl
+  - unzip
+  - git
+  - zsh
+
+runcmd:
+  - su - root -c 'curl -fsSL https://bun.sh/install | bash'
+  - su - root -c 'curl -fsSL https://claude.ai/install.sh | bash'
+  - echo 'export PATH="$HOME/.claude/local/bin:$HOME/.bun/bin:$PATH"' >> /root/.bashrc
+  - echo 'export PATH="$HOME/.claude/local/bin:$HOME/.bun/bin:$PATH"' >> /root/.zshrc
+  - touch /root/.cloud-init-complete
+CLOUD_INIT_EOF
+}
+
+create_server() {
+    local name="$1"
+    local type="${LINODE_TYPE:-g6-standard-1}"
+    local region="${LINODE_REGION:-us-east}"
+    local image="linode/ubuntu24.04"
+
+    log_warn "Creating Linode '$name' (type: $type, region: $region)..."
+
+    # Get all SSH key IDs
+    local ssh_keys_response=$(linode_api GET "/profile/sshkeys")
+    local authorized_keys=$(python3 -c "
+import json, sys
+data = json.loads(sys.stdin.read())
+keys = [k['ssh_key'] for k in data.get('data', [])]
+print(json.dumps(keys))
+" <<< "$ssh_keys_response")
+
+    local userdata=$(get_cloud_init_userdata)
+    local userdata_b64=$(echo "$userdata" | base64 -w0 2>/dev/null || echo "$userdata" | base64)
+
+    # Generate a root password (required by Linode API)
+    local root_pass=$(python3 -c "import secrets,string; print(''.join(secrets.choice(string.ascii_letters+string.digits+'!@#$') for _ in range(32)))")
+
+    local body=$(python3 -c "
+import json
+body = {
+    'label': '$name',
+    'region': '$region',
+    'type': '$type',
+    'image': '$image',
+    'authorized_keys': $authorized_keys,
+    'root_pass': '$root_pass',
+    'metadata': {
+        'user_data': '$userdata_b64'
+    },
+    'booted': True
+}
+print(json.dumps(body))
+")
+
+    local response=$(linode_api POST "/linode/instances" "$body")
+
+    if echo "$response" | grep -q '"id"' && ! echo "$response" | grep -q '"errors"'; then
+        LINODE_SERVER_ID=$(echo "$response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['id'])")
+        export LINODE_SERVER_ID
+        log_info "Linode created: ID=$LINODE_SERVER_ID"
+    else
+        local error_msg=$(echo "$response" | python3 -c "
+import json,sys
+d = json.loads(sys.stdin.read())
+errs = d.get('errors', [])
+print('; '.join(e.get('reason','Unknown') for e in errs) if errs else 'Unknown error')
+" 2>/dev/null || echo "$response")
+        log_error "Failed to create Linode: $error_msg"
+        return 1
+    fi
+
+    # Wait for Linode to become running and get IP
+    log_warn "Waiting for Linode to become active..."
+    local max_attempts=60 attempt=1
+    while [[ $attempt -le $max_attempts ]]; do
+        local status_response=$(linode_api GET "/linode/instances/$LINODE_SERVER_ID")
+        local status=$(echo "$status_response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['status'])")
+
+        if [[ "$status" == "running" ]]; then
+            LINODE_SERVER_IP=$(echo "$status_response" | python3 -c "import json,sys; print(json.loads(sys.stdin.read())['ipv4'][0])")
+            export LINODE_SERVER_IP
+            log_info "Linode active: IP=$LINODE_SERVER_IP"
+            return 0
+        fi
+        log_warn "Linode status: $status ($attempt/$max_attempts)"
+        sleep 5; ((attempt++))
+    done
+    log_error "Linode did not become active in time"; return 1
+}
+
+verify_server_connectivity() {
+    local ip="$1" max_attempts=${2:-30} attempt=1
+    log_warn "Waiting for SSH connectivity to $ip..."
+    while [[ $attempt -le $max_attempts ]]; do
+        if ssh $SSH_OPTS -o ConnectTimeout=5 "root@$ip" "echo ok" >/dev/null 2>&1; then
+            log_info "SSH connection established"; return 0
+        fi
+        log_warn "Waiting for SSH... ($attempt/$max_attempts)"; sleep 5; ((attempt++))
+    done
+    log_error "Server failed to respond via SSH after $max_attempts attempts"; return 1
+}
+
+wait_for_cloud_init() {
+    local ip="$1" max_attempts=${2:-60} attempt=1
+    log_warn "Waiting for cloud-init to complete..."
+    while [[ $attempt -le $max_attempts ]]; do
+        if ssh $SSH_OPTS "root@$ip" "test -f /root/.cloud-init-complete" >/dev/null 2>&1; then
+            log_info "Cloud-init completed"; return 0
+        fi
+        log_warn "Cloud-init in progress... ($attempt/$max_attempts)"; sleep 5; ((attempt++))
+    done
+    log_error "Cloud-init did not complete after $max_attempts attempts"; return 1
+}
+
+run_server() { local ip="$1" cmd="$2"; ssh $SSH_OPTS "root@$ip" "$cmd"; }
+upload_file() { local ip="$1" local_path="$2" remote_path="$3"; scp $SSH_OPTS "$local_path" "root@$ip:$remote_path"; }
+interactive_session() { local ip="$1" cmd="$2"; ssh -t $SSH_OPTS "root@$ip" "$cmd"; }
+
+destroy_server() {
+    local server_id="$1"
+    log_warn "Destroying Linode $server_id..."
+    linode_api DELETE "/linode/instances/$server_id"
+    log_info "Linode $server_id destroyed"
+}
+
+list_servers() {
+    local response=$(linode_api GET "/linode/instances")
+    python3 -c "
+import json, sys
+data = json.loads(sys.stdin.read())
+instances = data.get('data', [])
+if not instances: print('No Linodes found'); sys.exit(0)
+print(f\"{'LABEL':<25} {'ID':<12} {'STATUS':<12} {'IP':<16} {'TYPE':<15}\")
+print('-' * 80)
+for i in instances:
+    label = i.get('label','N/A'); lid = str(i['id']); status = i['status']
+    ip = i['ipv4'][0] if i.get('ipv4') else 'N/A'; ltype = i['type']
+    print(f'{label:<25} {lid:<12} {status:<12} {ip:<16} {ltype:<15}')
+" <<< "$response"
+}
--- a/linode/nanoclaw.sh
+++ b/linode/nanoclaw.sh
@ -0,0 +1,47 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
+if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
+else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
+log_info "NanoClaw on Linode"
+echo ""
+ensure_linode_token
+ensure_ssh_key
+SERVER_NAME=$(get_server_name)
+create_server "$SERVER_NAME"
+verify_server_connectivity "$LINODE_SERVER_IP"
+wait_for_cloud_init "$LINODE_SERVER_IP"
+log_warn "Installing tsx..."
+run_server "$LINODE_SERVER_IP" "source ~/.bashrc && bun install -g tsx"
+log_warn "Cloning and building nanoclaw..."
+run_server "$LINODE_SERVER_IP" "git clone https://github.com/gavrielc/nanoclaw.git ~/nanoclaw && cd ~/nanoclaw && npm install && npm run build"
+log_info "NanoClaw installed"
+echo ""
+if [[ -n "$OPENROUTER_API_KEY" ]]; then log_info "Using OpenRouter API key from environment"
+else OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180); fi
+log_warn "Setting up environment variables..."
+ENV_TEMP=$(mktemp)
+cat > "$ENV_TEMP" << EOF
+
+# [spawn:env]
+export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
+export ANTHROPIC_API_KEY="${OPENROUTER_API_KEY}"
+export ANTHROPIC_BASE_URL="https://openrouter.ai/api"
+EOF
+upload_file "$LINODE_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
+run_server "$LINODE_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
+rm "$ENV_TEMP"
+log_warn "Configuring nanoclaw..."
+DOTENV_TEMP=$(mktemp)
+cat > "$DOTENV_TEMP" << EOF
+ANTHROPIC_API_KEY=${OPENROUTER_API_KEY}
+EOF
+upload_file "$LINODE_SERVER_IP" "$DOTENV_TEMP" "/root/nanoclaw/.env"
+rm "$DOTENV_TEMP"
+echo ""
+log_info "Linode setup completed successfully!"
+echo ""
+log_warn "Starting nanoclaw..."
+log_warn "You will need to scan a WhatsApp QR code to authenticate."
+echo ""
+interactive_session "$LINODE_SERVER_IP" "cd ~/nanoclaw && source ~/.zshrc && npm run dev"
--- a/linode/openclaw.sh
+++ b/linode/openclaw.sh
@ -0,0 +1,56 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
+if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
+else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
+log_info "OpenClaw on Linode"
+echo ""
+ensure_linode_token
+ensure_ssh_key
+SERVER_NAME=$(get_server_name)
+create_server "$SERVER_NAME"
+verify_server_connectivity "$LINODE_SERVER_IP"
+wait_for_cloud_init "$LINODE_SERVER_IP"
+log_warn "Installing openclaw..."
+run_server "$LINODE_SERVER_IP" "source ~/.bashrc && bun install -g openclaw"
+log_info "OpenClaw installed"
+echo ""
+if [[ -n "$OPENROUTER_API_KEY" ]]; then log_info "Using OpenRouter API key from environment"
+else OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180); fi
+echo ""
+log_warn "Browse models at: https://openrouter.ai/models"
+MODEL_ID=$(safe_read "Enter model ID [openrouter/auto]: ") || MODEL_ID=""
+MODEL_ID="${MODEL_ID:-openrouter/auto}"
+log_warn "Setting up environment variables..."
+ENV_TEMP=$(mktemp)
+cat > "$ENV_TEMP" << EOF
+
+# [spawn:env]
+export OPENROUTER_API_KEY="${OPENROUTER_API_KEY}"
+export ANTHROPIC_API_KEY="${OPENROUTER_API_KEY}"
+export ANTHROPIC_BASE_URL="https://openrouter.ai/api"
+EOF
+upload_file "$LINODE_SERVER_IP" "$ENV_TEMP" "/tmp/env_config"
+run_server "$LINODE_SERVER_IP" "cat /tmp/env_config >> ~/.zshrc && rm /tmp/env_config"
+rm "$ENV_TEMP"
+log_warn "Configuring openclaw..."
+run_server "$LINODE_SERVER_IP" "rm -rf ~/.openclaw && mkdir -p ~/.openclaw"
+GATEWAY_TOKEN=$(openssl rand -hex 16)
+OPENCLAW_CONFIG_TEMP=$(mktemp)
+cat > "$OPENCLAW_CONFIG_TEMP" << EOF
+{
+  "env": { "OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}" },
+  "gateway": { "mode": "local", "auth": { "token": "${GATEWAY_TOKEN}" } },
+  "agents": { "defaults": { "model": { "primary": "openrouter/${MODEL_ID}" } } }
+}
+EOF
+upload_file "$LINODE_SERVER_IP" "$OPENCLAW_CONFIG_TEMP" "/root/.openclaw/openclaw.json"
+rm "$OPENCLAW_CONFIG_TEMP"
+echo ""
+log_info "Linode setup completed successfully!"
+log_info "Server: $SERVER_NAME (ID: $LINODE_SERVER_ID, IP: $LINODE_SERVER_IP)"
+echo ""
+log_warn "Starting openclaw..."
+run_server "$LINODE_SERVER_IP" "source ~/.zshrc && nohup openclaw gateway > /tmp/openclaw-gateway.log 2>&1 &"
+sleep 2
+interactive_session "$LINODE_SERVER_IP" "source ~/.zshrc && openclaw tui"
--- a/manifest.json
+++ b/manifest.json
@ -164,6 +164,21 @@
        "region": "ewr",
        "os_id": 2284
      }
+    },
+    "linode": {
+      "name": "Linode (Akamai)",
+      "description": "Linode instances via REST API",
+      "url": "https://www.linode.com/",
+      "type": "api",
+      "auth": "LINODE_API_TOKEN",
+      "provision_method": "POST /v4/linode/instances with metadata.user_data",
+      "exec_method": "ssh root@IP",
+      "interactive_method": "ssh -t root@IP",
+      "defaults": {
+        "type": "g6-standard-1",
+        "region": "us-east",
+        "image": "linode/ubuntu24.04"
+      }
    }
  },
  "matrix": {
@ -190,6 +205,12 @@
    "sprite/codex": "implemented",
    "hetzner/codex": "implemented",
    "digitalocean/codex": "implemented",
-    "vultr/codex": "implemented"
+    "vultr/codex": "implemented",
+    "linode/claude": "implemented",
+    "linode/openclaw": "implemented",
+    "linode/nanoclaw": "implemented",
+    "linode/aider": "implemented",
+    "linode/goose": "implemented",
+    "linode/codex": "implemented"
  }
 }