overthinkos/arch
distros/skills/arch/SKILL.md
Base Arch Linux image. Root of the box hierarchy for all pac-based boxes. MUST be invoked before building, deploying, configuring, or troubleshooting the arch box.
development
Updated Jun 11, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins archInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 11, 2026, 7:01 AM117.8s1 file scanned
SKILL.md
- name:
- arch
- description:
- |
arch
Root base image built from quay.io/archlinux/archlinux, pinned to a precise base-* date-serial tag in the arch base box (the overthinkos/arch submodule at box/arch; the quay mirror has the same content as docker.io/library/archlinux without Docker Hub's pull-rate limit). Foundation for all Arch Linux-based OpenCharly boxes.
Box Properties
| Property | Value |
|----------|-------|
| Base | quay.io/archlinux/archlinux (pinned base-* tag in the overthinkos/arch submodule) |
| Layers | (none) |
| Platforms | linux/amd64 |
| Distro | arch |
| Build | pac |
| Builders | pixi, npm, cargo, aur → arch-builder |
| Registry | ghcr.io/overthinkos |
Quick Start
charly box build arch
charly shell arch
Derived Boxes
arch (this base), /charly-distros:arch-builder, and the consumer Arch
boxes all live in the overthinkos/arch repo (git submodule at
box/arch), discovered as box/<name>/charly.yml boxes. That submodule
is SELF-CONTAINED (import: []): its base/builder stack is bare-local and it
composes the main repo's shared candies by @github git reference. Its boxes
write base: arch and route builders to arch-builder (bare-local refs, no
namespace qualifier):
/charly-distros:arch-builder— adds pixi, nodejs, build-toolchain, yay (inbox/arch)/charly-coder:arch-coder— kitchen-sink dev box (inbox/arch)/charly-coder:charly-arch— full charly toolchain on Arch (inbox/arch)/charly-distros:arch-test— pacman + AUR packaging test (inbox/arch)
Multi-Distro Support
This is the Arch counterpart to /charly-distros:fedora. The tag system (distro: [arch], build: [pac]) selects pac: package sections and pac: tasks in tasks:. Candies shared between Arch and Fedora boxes use distro-specific sections:
# charly.yml — multi-distro package declarations
rpm:
packages: [neovim] # Fedora
pac:
packages: [neovim] # Arch
AUR packages are authored under distro.arch.aur.package and built via
arch-builder (yay); the consuming box must add aur to its build: list
(build: [pac, aur]) — the base declares only build: [pac]. The
/charly-distros:cachyos base shares this exact AUR path (it routes aur →
arch-builder too), so AUR support is identical on arch and cachyos. See
/charly-image:layer "AUR (aur:)" for the authoring reference.
Verification
After charly box build:
charly box list— box appears in listcharly shell arch— interactive shell workscharly shell arch -c "pacman --version"— pacman available
Related Boxes
/charly-distros:arch-builder— adds pixi, nodejs, build-toolchain, yay/charly-coder:charly-arch— full charly toolchain on Arch/charly-distros:arch-test— pacman + AUR test image/charly-distros:fedora— RPM-based counterpart
Related Commands
/charly-build:build— build the arch base image/charly-core:shell— interactive shell in the base image
When to Use This Skill
MUST be invoked when the task involves the arch base image or understanding the Arch box chain. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/charly-image:image— box family umbrella (box:entries incharly.yml, build/validate/inspect/list)
Related Skills
overthinkos/charly
tools
VerifiedTrustedCommunity
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-cachyos
development
VerifiedTrustedCommunity
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-fedora
tools
VerifiedTrustedCommunity
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-arch
tools
VerifiedTrustedCommunity
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.
SKILL.mdUpdated Jun 10, 2026