First-Time Setup
# 0. Enable cloud feature
osmedeus config set cloud.enabled true
# 1. Credentials (pick one provider)
osmedeus cloud config set providers.aws.access_key_id <key>
osmedeus cloud config set providers.aws.secret_access_key <secret>
osmedeus cloud config set providers.aws.region ap-southeast-1
osmedeus cloud config set defaults.provider aws
# 2. SSH
osmedeus cloud config set ssh.private_key_path ~/.ssh/id_rsa
osmedeus cloud config set ssh.public_key_path ~/.ssh/id_rsa.pub
# 3. Clean the setup scripts first, then add worker setup
osmedeus cloud config set setup.commands.clear ""
osmedeus cloud config set setup.commands.add "curl -fsSL https://www.osmedeus.org/install.sh | bash"
osmedeus cloud config set setup.commands.add "osmedeus install base --preset"
# 4. Cost limits (recommended)
osmedeus cloud config set limits.max_hourly_spend 1.00
osmedeus cloud config set limits.max_total_spend 10.00
Workflow Mode
osmedeus cloud run -f fast -t example.com # Single target
osmedeus cloud run -f fast -T targets.txt --instances 5 # Distributed
osmedeus cloud run -f fast -t example.com --sync-back # Sync results
osmedeus cloud run -f fast -t example.com --auto-destroy # Auto cleanup
osmedeus cloud run -f fast -t example.com --sync-back --auto-destroy # Full lifecycle
osmedeus cloud run -f fast -t example.com --reuse # Reuse infra
osmedeus cloud run -m enum-subdomain -t example.com --timeout 30m # Module + timeout
Custom Command Mode
# Run anything on cloud instances
osmedeus cloud run --custom-cmd "nmap -sV {{Target}}" -t example.com
# Pipeline: multiple commands, sync results
osmedeus cloud run \
--custom-cmd "subfinder -d {{Target}} -o /tmp/osm-custom/subs.txt" \
--custom-cmd "cat /tmp/osm-custom/subs.txt | httpx -o /tmp/osm-custom/live.txt" \
--custom-post-cmd "wc -l /tmp/osm-custom/live.txt" \
--sync-path "/tmp/osm-custom/" \
-t example.com --auto-destroy
# Distribute targets, sync to custom dir
osmedeus cloud run \
--custom-cmd "cat {{Target}} | nuclei -o /tmp/osm-custom/nuclei.txt" \
--sync-path "/tmp/osm-custom/nuclei.txt" \
--sync-dest "./nuclei-results" \
-T targets.txt --instances 5
Variables: {{Target}} {{public_ip}} {{private_ip}} {{worker_name}} {{worker_id}} {{infra_id}} {{provider}} {{ssh_user}} {{index}}
Rules
- Commands run in
/tmp/osm-custom/on remote - Sequential per worker, parallel across workers
- First failure skips remaining cmds + post-cmds
- Sync destination:
<sync-dest>/<worker_name>-<ip>/<path>
Infrastructure
osmedeus cloud create --provider aws -n 3 # Create
osmedeus cloud list # List
osmedeus cloud destroy <id> # Destroy one
osmedeus cloud destroy all --force # Destroy all
osmedeus cloud setup --reuse-with "1.2.3.4" # Setup existing
Config
osmedeus cloud config list # View
osmedeus cloud config set <key> <value> # Set
osmedeus cloud config set <key>.add <value> # Append to list
osmedeus cloud config clean # Reset
Provider Quick Config
AWS:osmedeus cloud config set providers.aws.access_key_id ${AWS_ACCESS_KEY_ID}
osmedeus cloud config set providers.aws.secret_access_key ${AWS_SECRET_ACCESS_KEY}
osmedeus cloud config set providers.aws.region ap-southeast-1
osmedeus cloud config set providers.aws.instance_type t3.medium
osmedeus cloud config set providers.aws.use_spot true # 70% cheaper
osmedeus cloud config set providers.hetzner.token ${HETZNER_API_TOKEN}
osmedeus cloud config set providers.hetzner.location fsn1
osmedeus cloud config set providers.hetzner.server_type cx22
osmedeus cloud config set providers.digitalocean.token ${DO_TOKEN}
osmedeus cloud config set providers.digitalocean.region sgp1
osmedeus cloud config set providers.digitalocean.size s-2vcpu-4gb
osmedeus cloud config set providers.gcp.project_id ${GCP_PROJECT}
osmedeus cloud config set providers.gcp.credentials_file /path/to/sa-key.json
osmedeus cloud config set providers.gcp.region us-central1
osmedeus cloud config set providers.gcp.zone us-central1-a
osmedeus cloud config set providers.gcp.machine_type n1-standard-2
osmedeus cloud config set providers.linode.token ${LINODE_TOKEN}
osmedeus cloud config set providers.linode.region ap-south
osmedeus cloud config set providers.linode.type g6-standard-2
osmedeus cloud config set providers.azure.subscription_id ${AZURE_SUB_ID}
osmedeus cloud config set providers.azure.tenant_id ${AZURE_TENANT_ID}
osmedeus cloud config set providers.azure.client_id ${AZURE_CLIENT_ID}
osmedeus cloud config set providers.azure.client_secret ${AZURE_CLIENT_SECRET}
osmedeus cloud config set providers.azure.location southeastasia
osmedeus cloud config set providers.azure.vm_size Standard_B2s
Cost Reference
| Provider | Instance | vCPU | RAM | $/hr |
|---|---|---|---|---|
| Hetzner | cx22 | 2 | 4 GB | 0.007 |
| Linode | g6-standard-2 | 2 | 4 GB | 0.018 |
| DigitalOcean | s-2vcpu-4gb | 2 | 4 GB | 0.022 |
| AWS | t3.medium | 2 | 4 GB | 0.042 |
| Azure | Standard_B2s | 2 | 4 GB | 0.042 |
| GCP | n1-standard-2 | 2 | 7.5 GB | 0.095 |
Troubleshooting
osmedeus cloud run -f fast -t example.com --verbose-setup # See setup output
osmedeus cloud run -f fast -t example.com --debug # Full debug logs
osmedeus cloud list # Check for orphans
osmedeus cloud destroy all --force # Emergency cleanup
