ov-build/skills/inspect/SKILL.md
Image inspection showing resolved configuration as JSON. MUST be invoked before any work involving: ov image inspect command, viewing image configuration, or querying image metadata.
npx skillsauth add overthinkos/overthink-plugins inspectInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Invoked as ov image inspect <image>. See /ov-build:image for the family overview.
Displays the fully resolved configuration of an image as JSON. Shows base image, layers, ports, platforms, registry, tags, builder selections, volumes, and all computed metadata.
| Action | Command | Description |
|--------|---------|-------------|
| Full inspect | ov image inspect <image> | Show complete resolved config as JSON |
| Specific field | ov image inspect <image> --format FIELD | Extract a specific field |
| Disabled image | ov image inspect <image> --include-disabled | Operate on enabled: false images without flipping authored config |
# Inspect full image configuration
ov image inspect fedora
# Get specific field
ov image inspect jupyter --format ports
# Get the base image
ov image inspect sway-browser-vnc --format base
# Get layer list
ov image inspect ollama --format layers
# Get platforms
ov image inspect fedora --format platforms
# Get the builder map (build-type → builder image)
ov image inspect archlinux --format builder
# Get the builder capabilities this image declares
ov image inspect fedora-builder --format builds
The JSON output includes:
| Field | Description |
|-------|-------------|
| name | Image name |
| base | Base image (another image name or external reference) |
| layers | Ordered list of layers applied |
| ports | Exposed ports from all layers |
| platforms | Target platforms (e.g., linux/amd64, linux/arm64) |
| registry | Container registry for push |
| tags | Image tags |
| builder | Build-type → builder-image map (e.g. {"pixi": "fedora-builder"}) — resolved from image → base → defaults |
| builds | Builder capabilities this image declares (e.g. [pixi, npm, cargo, aur]) — not inherited |
| volumes | Declared volumes from layers |
| distro | Distro identity tags |
| build | Package format tags |
All --format values are the JSON field names from the inspect output. When passing --format to select a map (like builder) or list, the CLI prints one entry per line.
Caveat — --format bind_mounts: this one format option reads deploy.yml (not image.yml), because bind-mount backings are a deploy-time concept (ov config --bind <volume> writes them to deploy.yml). The output is display-only — no OCI label contamination, no build-mode state leak. All other --format values (ports, volumes, layers, base, builder, …) are strictly image.yml-derived per the mode-purity invariant (see /ov-build:build and /ov-dev:go "Mode purity").
ov image inspect resolves image.yml via os.Getwd(). Override with -C <dir> / --dir <dir> / OV_PROJECT_DIR=<dir>. See /ov-build:image "Project directory resolution".
ov image family siblings/ov-build:image -- Family overview + image.yml composition reference/ov-build:build -- Build the inspected image/ov-build:generate -- Containerfile generation for the inspected image/ov-build:list -- Enumerate images before inspecting one/ov-build:merge -- Post-build layer consolidation/ov-build:new -- Scaffold new layers/ov-build:pull -- Fetch prebuilt images into local storage/ov-build:validate -- Validate image and layer definitions before inspect/ov-build:layer -- Layer-level detail shown in inspect output/ov-core:deploy -- deploy.yml overlay applied on top of inspect's resolved configtools
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
development
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
tools
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
tools
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.