overthinkos/debian-debootstrap
distros/skills/debian-debootstrap/SKILL.md
Bootstrap-from-scratch Debian rootfs via debootstrap inside a privileged builder (from: builder:debootstrap, bootstrap_builder_image: debian-debootstrap-builder). Retained for offline/air-gapped builds and as a worked example of the from: builder:debootstrap pattern. Lives in the overthinkos/debian submodule (image/debian). MUST be invoked before building or troubleshooting debian-debootstrap.
development
Updated May 24, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins debian-debootstrapInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 24, 2026, 5:35 AM220.1s1 file scanned
SKILL.md
- name:
- debian-debootstrap
- description:
- |
- builder (from:
- builder:debootstrap, bootstrap_builder_image:
- worked example of the from:
- builder:debootstrap pattern. Lives in the
debian-debootstrap
Bootstrap-from-scratch Debian root filesystem, built via debootstrap inside
the privileged /ov-distros:debian-debootstrap-builder container
(from: builder:debootstrap, bootstrap_builder_image: debian-debootstrap-builder).
Lives in
overthinkos/debian(git submodule atimage/debian). Build:ov -C image/debian image build debian-debootstrap.
When to use it (and when not)
The canonical Debian base (/ov-distros:debian) pulls the upstream-published
debian:13 OCI image from Docker Hub — that is the recommended, faster path
(no privileged build). This debootstrap variant exists for offline /
air-gapped builds and as a worked example of the from: builder:debootstrap +
bootstrap_builder_image: pattern (the deb-family counterpart of
/ov-distros:arch-pacstrap / /ov-distros:cachyos-pacstrap).
Image Properties
| Property | Value |
|----------|-------|
| From | builder:debootstrap |
| bootstrap_builder_image | debian-debootstrap-builder |
| Distro | debian:13, debian |
| Build | deb |
| Home repo | overthinkos/debian (image/debian) |
The debian distro config (debootstrap suite trixie, mirror
http://deb.debian.org/debian, base packages, bootloader template) lives in the
main repo's build.yml and is flat-imported by the submodule (a bare-string
import: item).
Cross-References
/ov-distros:debian— the recommended Docker-Hub base/ov-distros:debian-debootstrap-builder— the privileged builder it uses/ov-vm:debian— the VM built via the same debootstrap path
When to Use This Skill
MUST be invoked before building or debugging the Debian debootstrap rootfs. Invoke BEFORE reading source code or launching Explore agents.
Related Skills
overthinkos/agents
development
VerifiedTrustedCommunity
Claude Code multi-agent support in Overthink — sub-agents, dynamic workflows, and agent teams, and how each drives the existing `ov eval` disposable beds to test and verify. MUST be invoked before authoring or invoking an ov sub-agent / dynamic workflow / agent team, wiring agent-lifecycle hooks, or asking "which primitive should drive the R10 beds?".
SKILL.mdUpdated May 31, 2026
overthinkos/workspace-mount
tools
VerifiedTrustedCommunity
Mounts a virtiofs share tagged `workspace` at /workspace inside a VM guest via a systemd .mount unit. Use when a kind:vm entity shares a host directory into the guest and you need it auto-mounted (and re-mounted at every boot).
SKILL.mdUpdated May 30, 2026
overthinkos/android
development
VerifiedTrustedCommunity
MUST be invoked before any work involving: the `kind: android` schema kind, a `target: android` deploy, the `apk:` layer package format (installing Android apps declaratively), AndroidDeployTarget, an in-pod emulator OR a remote/physical adb-endpoint device, or nested `pod → android` deployment. The first-class Android device + app surface that sits above `ov eval adb`/`appium`.
SKILL.mdUpdated May 26, 2026
overthinkos/git-workflow
tools
VerifiedTrustedCommunity
Use when committing, branching, pushing, merging, tagging, creating PRs, or approving/merging PRs with gh — the feat/-branch, R10-gated, never-force-push landing workflow across the main repo + the plugins submodule + image/<distro> submodules. Covers sync-to-upstream, branch/worktree pruning, the fork+PR path for contributors without write access, and cross-repo @github landing order.
SKILL.mdUpdated May 25, 2026