overthinkos/selkies-kde-nvidia
selkies/skills/selkies-kde-nvidia/SKILL.md
The NVIDIA-GPU build of the KDE Plasma Selkies streaming desktop — full Plasma nested in pixelflux with REAL NVENC (cuda-arch-builder-compiled). MUST be invoked before building, deploying, or troubleshooting the selkies-kde-nvidia box.
development
Updated Jun 22, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins selkies-kde-nvidiaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 22, 2026, 6:44 AM107.1s1 file scanned
SKILL.md
- name:
- selkies-kde-nvidia
- description:
- |
Box: selkies-kde-nvidia
The NVIDIA-GPU build of the KDE Plasma flavor (/charly-selkies:selkies-kde) —
the same headless-pod KDE streaming desktop on the CachyOS GPU base
(cachyos.nvidia), with pixelflux's real NVENC encoder compiled in. It is the
KDE sibling of /charly-selkies:selkies-labwc-nvidia (labwc + NVENC); both use
builder.pixi: arch.cuda-arch-builder so the selkies candy's build.sh compiles
pixelflux's real nvenc-sys encoder (the stock arch-builder has no CUDA → an
NVENC stub).
Owned by the overthinkos/cachyos submodule (box/cachyos).
Definition
selkies-kde-nvidia:
base: nvidia # the CachyOS GPU base (cachyos.nvidia)
build: [pac, aur]
builder: {pixi: arch.cuda-arch-builder} # nvcc + ffnvcodec headers → real NVENC
candy:
- agent-forwarding
- selkies-kde-desktop
- dbus
- charly
port: ["3000:3000", "9222:9222", "9224:9224", "2222:2222"]
platform: [linux/amd64]
NVENC compile-proof (check-coverage)
The box carries a build-scope check: check pixelflux-nvenc-compiled that
greps the built pixelflux .so for NvEncodeAPICreateInstance (the NVENC SDK
entry point the nvenc-sys crate binds). The stub build patches nvenc-sys out
of pixelflux's Cargo.toml, so the symbol is absent → the check FAILS on a
non-NVENC build. This is the regression-proof for the box's NVENC functionality
(identical to /charly-selkies:selkies-labwc-nvidia).
Ports / Encoder
Same ports as /charly-selkies:selkies-kde (3000/9222/9224/2222). Encoder: real NVENC
on the passed-through NVIDIA GPU (CDI --device nvidia.com/gpu=all); falls back to
x264 when the GPU is unavailable.
Quick Start
charly -C box/cachyos box build selkies-kde-nvidia
charly check box selkies-kde-nvidia # build-scope incl. pixelflux-nvenc-compiled
NVENC at runtime requires a passed-through NVIDIA GPU — proven on the
check-selkies-kde-nvidia-vm bed (a requires_exclusive: [nvidia-gpu] passthrough
VM that asserts real NVENC frame production; the preemption arbiter frees the GPU
from any running holder). See /charly-internals:disposable + /charly-check:check.
Related Skills
/charly-selkies:selkies-kde— the cpu/default sibling (shared definition + the KDE flavor framing)./charly-selkies:selkies-labwc-nvidia— the labwc + NVENC sibling (same cuda-arch-builder + NVENC-compile proof)./charly-selkies:selkies-kde-desktop— the KDE metalayer + the de-SDDM headless-Plasma design./charly-distros:cachyos— the CachyOS GPU base (cachyos.nvidia) + submodule./charly-distros:nvidia,/charly-distros:cuda— the GPU runtime + CUDA toolkit candies.
Related
/charly-image:image— image family umbrella (candy:image entries withbase:/from:, build/validate/inspect/list)./charly-build:build— the embedded build vocabulary (distros, builders, init-systems).
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026