Nanobot — $0 Cost Personal AI
on Google Cloud Free Tier

#!/usr/bin/env bash
# ── Auto-detect Project ID from Cloud Shell ────────────────────
PROJECT_ID="$(gcloud config get-value project 2>/dev/null)"
ZONE="us-central1-a"        # keep for Always Free tier
# ─────────────────────────────────────────────────────

set -uo pipefail  # removed -e so script continues on error
VM_NAME="nanobot-vm" ; SA_NAME="nanobot-sa"
FAILED=0

echo "🔌  Enabling APIs (Compute + IAM)…"
if ! gcloud services enable compute.googleapis.com iam.googleapis.com --project="$PROJECT_ID" 2>&1; then
  echo "❌ Failed to enable APIs. Check your project ID and billing status." >&2
  FAILED=1
else
  echo "   ↳ APIs confirmed."
fi

echo "🔐  Creating restricted service account (no IAM roles)…"
gcloud iam service-accounts create "$SA_NAME" \
  --display-name="Nanobot SA — zero GCP permissions" \
  --project="$PROJECT_ID" 2>&1 | grep -q "already exists" && echo "   ↳ Service account already exists (OK)" || echo "   ↳ Service account created."
SA_EMAIL="${SA_NAME}@${PROJECT_ID}.iam.gserviceaccount.com"

if [ $FAILED -eq 0 ]; then
  echo "🖥️   Creating free-tier VM (with swap auto-configured on first boot)…"

  # Write startup script to temp file (configures 2GB swap on first boot)
  cat > /tmp/startup.sh << 'STARTUP_EOF'
#!/bin/bash
if [ ! -f /swapfile ]; then
  fallocate -l 2G /swapfile && chmod 600 /swapfile
  mkswap /swapfile && swapon /swapfile
  echo "/swapfile none swap sw 0 0" >> /etc/fstab
  sysctl -w vm.swappiness=10
  echo "vm.swappiness=10" >> /etc/sysctl.conf
fi
STARTUP_EOF

  if ! gcloud compute instances create "$VM_NAME" \
    --project="$PROJECT_ID" \
    --zone="$ZONE" \
    --machine-type=e2-micro \
    --image-project=debian-cloud \
    --image-family=debian-12 \
    --boot-disk-size=10GB \
    --boot-disk-type=pd-standard \
    --boot-disk-auto-delete \
    --service-account="$SA_EMAIL" \
    --scopes=https://www.googleapis.com/auth/logging.write,https://www.googleapis.com/auth/monitoring.write \
    --metadata=block-project-ssh-keys=true \
    --metadata-from-file=startup-script=/tmp/startup.sh 2>&1; then
    echo "❌ VM creation failed. See error above." >&2
    FAILED=1
  fi

  rm -f /tmp/startup.sh
fi

echo ""
echo "════════════════════════════════════════════"
if [ $FAILED -eq 0 ]; then
  echo "✅  VM ready! 2 GB swap will be live by the time you SSH in."
  echo "════════════════════════════════════════════"
  echo ""
  echo "▶  SSH into your VM:"
  echo "   gcloud compute ssh $VM_NAME --zone=$ZONE --project=$PROJECT_ID"
else
  echo "❌  Setup incomplete — review errors above"
  echo "════════════════════════════════════════════"
  echo ""
  echo "Common fixes:"
  echo "  • Wrong PROJECT_ID → verify in GCP Console"
  echo "  • Billing not enabled → console.cloud.google.com/billing"
  echo "  • VM already exists → delete it first or use a different name"
  echo ""
  echo "Cloud Shell will stay open so you can review the errors."
fi
echo ""

Loading…