Skip to content
mulga

Run the AWS API
on your own metal.

Install guides, reference architectures and runnable OpenTofu workbooks for EC2, S3, EBS, VPC, IAM, ECS and EKS workloads — on bare-metal, edge and on-premise hardware you control.

bash

# Install Spinifex

$curl -fsSL https://install.mulgadc.com | bash

# Setup OVN networking

$sudo /usr/local/share/spinifex/setup-ovn.sh --management

# Initialize cluster

$sudo spx admin init --node node1 --nodes 1

# Start services

$sudo systemctl start spinifex.target

# Verify installation

$export AWS_PROFILE=spinifex

$aws ec2 describe-instance-types

Spinifex initialized successfully.

Developer Quickstarts

The shortest path from bare hardware to a running workload.

Teach your coding agent Spinifex

Paste this into Claude Code, Cursor, or any agent with web access. It learns how to reach your cluster, drive it with the AWS CLI and OpenTofu, and where the docs are — without changing anything on your machine.

>Read https://docs.mulgadc.com/agent-setup/prompt.md and follow it to work with my Spinifex cluster.

Prefer to read it yourself? View the instructions, or point an agent at llms.txt and llms-full.txt.

Installation

Get Spinifex running on a single server, a multi-node cluster, or hardware with no internet connection.

Administration

Day-two operations: bring up your first cluster, drive the spx CLI, and apply upgrades safely.

Compute and Networking

Launch and place EC2 instances, wire up VPC networking, and pass GPUs through to guests.

Identity and Access

IAM users, groups and roles, temporary credentials via STS, and instance metadata.

Containers

Run Kubernetes and ECS workloads on your own hardware, backed by a private image registry.

Migration

Move existing AWS workloads onto Spinifex, or keep the two in sync and run hybrid.

Terraform Workbooks

Complete, runnable OpenTofu configurations — apply them as-is or use them as a starting point.

Bastion with Private Subnet

Deploy a VPC with public and private subnets on Spinifex, then use a bastion host as the only route to an isolated EC2 instance that has no internet access.

S3-Backed Web App

Deploy a Flask file-sharing app on EC2 backed by S3 (Predastore) with Terraform, using an IAM instance profile and short-lived STS credentials from IMDS.

Nginx Web Server (Load Balanced)

Deploy a VPC with two private EC2 instances running Nginx behind an internet-facing Application Load Balancer on Spinifex, using Terraform or OpenTofu.

Nginx Web Server

Provision a VPC, public subnet, internet gateway, route table, security group, and an EC2 instance that installs and starts Nginx from cloud-init user-data.

EKS Quickstart

Stand up a minimal managed Kubernetes cluster with Terraform: a VPC, IAM roles, an EKS cluster, a worker node group, an ECR repository, and a demo web app.

EKS HTTPS Ingress (LBC + ACM)

Serve a demo app over HTTPS on EKS using the AWS Load Balancer Controller addon and an ACM certificate, with an internet-facing ALB built from an Ingress.

GitOps on EKS (Argo CD + EBS-CSI)

Deliver an app to EKS with GitOps: the Argo CD addon syncs it from git, an EBS-CSI PersistentVolume holds its state, and HTTPS is served via LBC and ACM.

ECS Quickstart

Stand up a full AWS-compatible ECS stack with Terraform: a VPC, IAM roles, a cluster, a task definition, container instances, and a load-balanced service.

RDS Quickstart (PostgreSQL)

Stand up a managed PostgreSQL database on Spinifex with Terraform: a VPC, DB subnet group, parameter group, aws_db_instance, and a client VM that runs psql.

Security and Compliance

Operator policies and controls covering malware, media sanitisation, network exposure and physical access.

Coverage

The operations the platform implements in each AWS API model, and the ones it does not offer — generated from the dispatch tables.

AWS API Coverage

The AWS API operations Spinifex serves, generated from its gateway dispatch tables and the pinned AWS SDK service models on each build, service by service.

EC2 API Coverage

The Amazon EC2 API operations Spinifex implements, covering instances, EBS volumes, VPC networking, tags, security groups and the rest of the compute surface.

IAM API Coverage

The AWS IAM API operations Spinifex implements, covering users, roles, policies, groups, instance profiles and the access keys that authenticate them.

S3 API Coverage

The Amazon S3 API operations Predastore serves on the platform's S3 endpoint, covering buckets, objects, multipart uploads and the policies that guard them.

EKS API Coverage

The Amazon EKS API operations Spinifex implements, covering clusters, nodegroups, add-ons, access entries and the identity providers they authenticate.

ECS API Coverage

The Amazon ECS API operations Spinifex implements, covering clusters, services, tasks, container instances and the task definitions they are launched from.

ECR API Coverage

The Amazon ECR API operations Spinifex implements, alongside the OCI distribution endpoint that carries the image layers for every repository it serves.

ELBv2 API Coverage

The Elastic Load Balancing v2 API operations Spinifex implements, for both the Application and Network Load Balancers it serves, listeners and target groups.

RDS API Coverage

The Amazon RDS API operations Spinifex implements, for the managed PostgreSQL and MariaDB engines it offers, covering instances, snapshots and parameters.

ACM API Coverage

The AWS Certificate Manager API operations Spinifex implements, generated from the gateway dispatch tables and the pinned AWS service model on each build.

STS API Coverage

The AWS STS API operations Spinifex implements, covering role assumption, session tokens and web identity federation (IRSA), with those it does not offer.

Hardware

Validated hardware builds with measured results, grouped by vendor.