overthinkos/arch-builder
distros/skills/arch-builder/SKILL.md
Arch Linux builder image with pixi, Node.js, build toolchain, and yay AUR helper. Default builder for pixi, npm, cargo, and aur multi-stage builds on Arch. MUST be invoked before building, deploying, configuring, or troubleshooting the arch-builder box.
tools
Updated Jun 22, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins arch-builderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 22, 2026, 6:32 AM76.2s1 file scanned
SKILL.md
- name:
- arch-builder
- description:
- |
arch-builder
Builder image for Arch Linux multi-stage builds. Counterpart to /charly-distros:fedora-builder — provides the same build capabilities (pixi, npm, cargo) plus AUR support via yay.
Box Properties
| Property | Value | |----------|-------| | Base | arch | | Layers | pixi, nodejs, build-toolchain, yay | | Builds | pixi, npm, cargo, aur | | Platforms | linux/amd64 | | Registry | ghcr.io/overthinkos |
Full Candy Stack
- arch — base Arch Linux image
- pixi — pixi package manager (conda-forge Python environments)
- nodejs — Node.js and npm
- build-toolchain — gcc, cmake, autoconf, ninja, git, pkg-config
- yay — AUR helper (base-devel, git, yay binary)
Role in Build System
When an Arch-based box has candies with pixi.toml, package.json, Cargo.toml, or aur: packages, the build system uses this image as the builder for multi-stage builds. Configured via the arch box's builder: field (a map of build-type → builder-image):
# charly.yml
arch:
builder:
pixi: arch-builder
npm: arch-builder
cargo: arch-builder
aur: arch-builder
The builder definitions themselves (pixi/npm/cargo/aur) live in the embedded builder: vocabulary — the same word is used intentionally because both maps key on the same slot (the build-type name).
Quick Start
charly box build arch-builder
charly shell arch-builder -c "pixi --version"
charly shell arch-builder -c "node --version"
charly shell arch-builder -c "yay --version"
Related
/charly-distros:arch— parent base image/charly-distros:fedora-builder— Fedora counterpart (same role, no AUR)/charly-tools:yay— AUR helper candy (unique to Arch)/charly-languages:pixi— pixi package manager candy/charly-coder:nodejs— Node.js candy/charly-coder:build-toolchain— C/C++ build tools candy
Verification
charly shell arch-builder -c "pixi --version && node --version && yay --version && gcc --version"
When to Use This Skill
MUST be invoked when the task involves the arch-builder box, Arch multi-stage builds, or AUR package building infrastructure. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/charly-image:image— image family umbrella (candy:image entries — those carryingbase:/from:— incharly.yml, build/validate/inspect/list)/charly-build:build— the embedded build vocabulary (distros, builders, init-systems)
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026