overthinkos/fedora
distros/skills/fedora/SKILL.md
Base Fedora 43 image. Root of the box hierarchy for all RPM-based boxes. MUST be invoked before building, deploying, configuring, or troubleshooting the fedora box.
development
Updated Jun 11, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins fedoraInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 11, 2026, 7:05 AM249.7s1 file scanned
SKILL.md
- name:
- fedora
- description:
- |
fedora
Root base image built from quay.io/fedora/fedora:43. Foundation for all RPM-based OpenCharly boxes.
Owned by the overthinkos/fedora submodule. The Fedora base stack —
fedora, /charly-distros:fedora-builder, /charly-distros:fedora-nonfree — lives
bare-local in the overthinkos/fedora submodule (mounted at box/fedora),
which is SELF-CONTAINED (import: []): the base stack is bare-local and the
submodule composes the main repo's shared candies by @github git reference. Its
boxes write base: fedora and route builders to fedora-builder (bare-local
refs, no namespace qualifier). The Fedora consumer showcase boxes
(/charly-coder:fedora-coder, /charly-distros:charly-fedora, /charly-distros:fedora-test)
and the Fedora-rooted pod families all live in the same submodule, discovered as
box/<name>/charly.yml boxes. The main repo imports this submodule under the
fedora namespace (one-directional — fedora imports nothing back) to reference
those relocated boxes. Build with charly box build fedora from the submodule
(or charly -C box/fedora box build fedora).
Box Properties
| Property | Value | |----------|-------| | Base | quay.io/fedora/fedora:43 | | Layers | (none) | | Platforms | linux/amd64 | | Pkg | rpm | | Registry | ghcr.io/overthinkos |
Quick Start
charly box build fedora
charly shell fedora
dnf download tuning (distro.fedora.dnf)
build.yml distro.fedora.dnf writes dnf download-speed knobs to
/etc/dnf/dnf.conf during the bootstrap, so they apply to the bootstrap install
AND every per-layer dnf install in this box and its descendants:
# build.yml
distro:
fedora:
dnf:
max_parallel_downloads: 10 # concurrent package downloads
fastestmirror: true # sort mirrors by measured speed
These are speed-only — they never change which packages are selected
(install_weak_deps stays on the bootstrap install_cmd's
--setopt=install_weak_deps=False). The block is a DnfConfig on DistroDef
and inherits across distro inheritance like the other sub-blocks. Source:
charly/generate.go:renderDnfConfWrite.
Derived Boxes
/charly-distros:fedora-nonfree— adds RPM Fusion repos/charly-distros:fedora-builder— adds pixi, nodejs, build-toolchain/charly-distros:nvidia— adds CUDA toolkit/charly-openclaw:openclaw— adds OpenClaw gateway/charly-distros:githubrunner— adds GitHub Actions runner
Verification
After charly box build:
charly box list— box appears in listcharly shell fedora— interactive shell works
Related Boxes
/charly-distros:fedora-nonfree— adds RPM Fusion repos/charly-distros:fedora-builder— adds pixi, nodejs, build-toolchain/charly-distros:charly-fedora— full charly toolchain on Fedora/charly-distros:arch— pacman-based counterpart base
Related Commands
/charly-build:build— build the fedora base image/charly-core:shell— interactive shell in the base image
When to Use This Skill
MUST be invoked when the task involves the fedora base image or understanding the box chain. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/charly-image:image— box family umbrella (box:entries incharly.yml, build/validate/inspect/list)
Related Skills
overthinkos/charly
tools
VerifiedTrustedCommunity
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-cachyos
development
VerifiedTrustedCommunity
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-fedora
tools
VerifiedTrustedCommunity
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-arch
tools
VerifiedTrustedCommunity
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.
SKILL.mdUpdated Jun 10, 2026