overthinkos/cachyos-pacstrap-builder
distros/skills/cachyos-pacstrap-builder/SKILL.md
Privileged pacstrap builder image for bootstrapping a CachyOS rootfs from scratch. base: arch.arch (via the `arch` import namespace) + the pacstrap-builder candy. Lives in the overthinkos/cachyos submodule (box/cachyos). MUST be invoked before building or troubleshooting cachyos-pacstrap / cachyos-vm.
development
Updated Jun 14, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins cachyos-pacstrap-builderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 14, 2026, 5:50 AM204.7s1 file scanned
SKILL.md
- name:
- cachyos-pacstrap-builder
- description:
- |
- scratch. base:
- arch.arch (via the `arch` import namespace) + the pacstrap-builder
cachyos-pacstrap-builder
Privileged builder image used to bootstrap a CachyOS root filesystem via
pacstrap inside a container. It is the bootstrap_builder_image: for
/charly-distros:cachyos-pacstrap and the builder_image: for the
/charly-vm:cachyos VM.
Lives in
overthinkos/cachyos(git submodule atbox/cachyos). It isbase: arch.arch— thearchbase from theoverthinkos/archsubmodule, reached because the cachyoscharly.ymlimports that submodule under thearchnamespace. Its single candy,pacstrap-builder, lives in the main repo (shared with/charly-distros:arch-builder's pacstrap path) and is pulled by git reference.
Box Properties
| Property | Value |
|----------|-------|
| Base | arch.arch (from the overthinkos/arch submodule, via the arch import namespace) |
| Layer | pacstrap-builder (@github.com/overthinkos/overthink/candy/pacstrap-builder:<tag>) |
| Distro | arch |
| Build | pac |
| Home repo | overthinkos/cachyos (box/cachyos) |
Quick Start
charly -C box/cachyos box build cachyos-pacstrap-builder
This is the R10 canary for the submodule's composition machinery: a successful
build proves the arch import namespace resolves the arch base from the
overthinkos/arch submodule, the git-ref'd pacstrap-builder candy
materializes, and the embedded build vocabulary (pacstrap builder definition +
cachyos distro config) is reachable.
charly check box cachyos-pacstrap-builder runs the build-scope check: 4 probes pass
(/usr/sbin/pacstrap, arch-install-scripts installed, /usr/sbin/grub-install,
/usr/sbin/parted) — i.e. the pacstrap toolchain the builder must ship.
Cross-References
/charly-distros:cachyos— the Docker-Hub CachyOS base (sibling, no pacstrap)/charly-distros:cachyos-pacstrap— the rootfs this builder bootstraps/charly-vm:cachyos— the VM that uses this asbuilder_image:/charly-distros:arch//charly-distros:arch-builder— the Arch base + builder it mirrors
When to Use This Skill
MUST be invoked when building or debugging the CachyOS pacstrap path. Invoke BEFORE reading source code or launching Explore agents.
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026