overthinkos/archlinux-builder
ov-images/skills/archlinux-builder/SKILL.md
Arch Linux builder image with pixi, Node.js, build toolchain, and yay AUR helper. Default builder for pixi, npm, cargo, and aur multi-stage builds on Arch. MUST be invoked before building, deploying, configuring, or troubleshooting the archlinux-builder image.
tools
Updated Apr 24, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins archlinux-builderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 2:18 PM140.3s1 file scanned
SKILL.md
- name:
- archlinux-builder
- description:
- |
archlinux-builder
Builder image for Arch Linux multi-stage builds. Counterpart to /ov-images:fedora-builder — provides the same build capabilities (pixi, npm, cargo) plus AUR support via yay.
Image Properties
| Property | Value | |----------|-------| | Base | archlinux | | Layers | pixi, nodejs, build-toolchain, yay | | Builds | pixi, npm, cargo, aur | | Platforms | linux/amd64 | | Registry | ghcr.io/overthinkos |
Full Layer Stack
- archlinux — base Arch Linux image
- pixi — pixi package manager (conda-forge Python environments)
- nodejs — Node.js and npm
- build-toolchain — gcc, cmake, autoconf, ninja, git, pkg-config
- yay — AUR helper (base-devel, git, yay binary)
Role in Build System
When an Arch-based image has layers with pixi.toml, package.json, Cargo.toml, or aur: packages, the build system uses this image as the builder for multi-stage builds. Configured via the archlinux image's builder: field (a map of build-type → builder-image):
# image.yml
archlinux:
builder:
pixi: archlinux-builder
npm: archlinux-builder
cargo: archlinux-builder
aur: archlinux-builder
The builder definitions themselves (pixi/npm/cargo/aur) live in build.yml's builder: section — the same word is used intentionally because both maps key on the same slot (the build-type name).
Quick Start
ov image build archlinux-builder
ov shell archlinux-builder -c "pixi --version"
ov shell archlinux-builder -c "node --version"
ov shell archlinux-builder -c "yay --version"
Related
/ov-images:archlinux— parent base image/ov-images:fedora-builder— Fedora counterpart (same role, no AUR)/ov-layers:yay— AUR helper layer (unique to Arch)/ov-layers:pixi— pixi package manager layer/ov-layers:nodejs— Node.js layer/ov-layers:build-toolchain— C/C++ build tools layer
Verification
ov shell archlinux-builder -c "pixi --version && node --version && yay --version && gcc --version"
When to Use This Skill
MUST be invoked when the task involves the archlinux-builder image, Arch multi-stage builds, or AUR package building infrastructure. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/ov:image— image family umbrella (image:entries inoverthink.yml, build/validate/inspect/list)/ov:build—build.ymlvocabulary (distros, builders, init-systems)
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026