local/skills/charly-cachyos/SKILL.md
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
npx skillsauth add overthinkos/overthink-plugins charly-cachyosInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
The operator's CachyOS developer-workstation profile: a kind: local template
(local.charly-cachyos) plus a target: local + host: local deploy entry
(deploy.charly-cachyos) that applies a kitchen-sink dev stack directly to the
current machine via ShellExecutor — no SSH, no VM, no container.
It lives in the overthinkos/cachyos repo (git submodule at
box/cachyos), in that repo's config (its charly.yml + per-kind
sibling files) — both the
kind: local template and its kind: deploy entry (deploy.charly-cachyos). The
repo also carries a sibling kind: deploy, deploy.cachyos-gpu — the
persistent operator GPU-workstation VM (target: vm, not disposable;
see /charly-vm:cachyos) — so charly-cachyos is no longer the only kind: deploy
there; every disposable test bed remains kind: eval. Apply it with:
charly -C box/cachyos update charly-cachyos
# or, anywhere:
charly --repo overthinkos/cachyos update charly-cachyos
30 candies. Most are pulled from the main repo by git reference
(@github.com/overthinkos/overthink/candy/<name>:<tag>); the cachyos-exclusive
ghostty, keepassxc-keyring, and wheel-nopasswd are vendored locally in this
repo's candy/ (resolved via its discover: block):
wheel-nopasswd, yay, dev-tools, gh, pre-commit, tmux, direnv,
gnupg, keepassxc, keepassxc-keyring, tailscale, tailscale-up,
build-toolchain, golang, rust, nodejs, uv, claude-code, codex,
gemini, oracle, forgecode, devops-tools, docker-ce, kubernetes,
vscode, ghostty, chrome, nvidia, charly.
| Field | Value |
|---|---|
| install_opts.builder_image | ghcr.io/overthinkos/arch-builder:2026.122.2252 (OCI ref, not a candy) |
| install_opts | with_service, allow_repo_changes, allow_root_tasks all true |
| env | EDITOR=nvim, PAGER=less |
| disposable (deploy) | true — charly update charly-cachyos is authorized |
passwordless-sudo-host — sudo -n true (wheel-nopasswd candy must have run)nvidia-ctk-present — command -v nvidia-ctknvidia-cdi-spec — /etc/cdi/nvidia.yaml existsBoth nvidia-* probes gate on an active host NVIDIA driver
([ -e /dev/nvidiactl ] || nvidia-smi) and pass with an N/A note on a
card-less or VFIO-passthrough host, so the profile applies cleanly anywhere.
local.charly-cachyos's remote candy refs are collected and materialized by the
same CollectRemoteRefs walk as box candy refs: the walk collects the candy
refs of the ROOT project's own kind: local templates (charly-cachyos is the root
here), so charly box validate / charly update charly-cachyos resolve the github-ref'd
candies. (Collection is reachability-scoped — a namespace's kind:local
templates, imported only as a dependency, are NOT collected by an importer; only
the root's own locals are. See /charly-internals:go "Remote-layer resolver".)
/charly-local:local-spec — kind: local template authoring reference/charly-local:local-deploy — the target: local deployment surface/charly-distros:cachyos — the CachyOS base of the same family/charly-core:deploy — deploy entry semantics (cross-kind name reuse: deploy.charly-cachyos ↔ local.charly-cachyos)MUST be invoked when editing or applying the charly-cachyos workstation profile, or reasoning about the kind:local remote-candy-ref machinery. Invoke BEFORE reading source code or launching Explore agents.
tools
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
tools
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
tools
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.
tools
Show charly CLI version information. MUST be invoked before any work involving: charly version command or checking installed charly version. Named `charly-version` (not `version`) to disambiguate from Claude Code's built-in `/version` slash command.