distros/skills/ubuntu-builder/SKILL.md
Minimal Ubuntu 24.04 builder image (pixi + Node.js + build-toolchain) used as the multi-stage builder for Ubuntu-based boxes — currently ubuntu-coder. Runs as uid 1000 `ubuntu` (adopted from the upstream ubuntu:24.04 base image via build.yml's base_user declaration). MUST be invoked before building, deploying, configuring, or troubleshooting the ubuntu-builder box.
npx skillsauth add overthinkos/overthink-plugins ubuntu-builderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Ubuntu 24.04 (noble) counterpart of /charly-distros:fedora-builder and /charly-distros:debian-builder. Same role — pixi/npm/cargo multi-stage builder — with one important difference: the builder runs as ubuntu (uid 1000) because the upstream ubuntu:24.04 base image ships a pre-existing ubuntu:ubuntu account at uid 1000, and build.yml distro.ubuntu.base_user adopts it.
Lives in the overthinkos/ubuntu repo (git submodule at box/ubuntu).
Build it from the submodule: charly -C box/ubuntu box build ubuntu-builder
(normally builds implicitly as a dependency of ubuntu-coder). Its
pixi/nodejs/build-toolchain candies are pulled by github reference from the
main repo.
| Property | Value |
|----------|-------|
| Base | ubuntu (which = ubuntu:24.04 + our bootstrap) |
| Layers | pixi, nodejs, build-toolchain |
| Platforms | linux/amd64 |
| Registry | ghcr.io/overthinkos |
| User | ubuntu / uid 1000 (adopt mode — see /charly-image:image "user_policy") |
| Home | /home/ubuntu |
/charly-distros:ubuntu — Ubuntu 24.04 + bootstrap. Inherits Debian's apt-get update && apt-get install -y --no-install-recommends curl ca-certificates gnupg pattern because build.yml distro.ubuntu declares inherits: debian. Ubuntu-specific: base_user: { name: ubuntu, uid: 1000, gid: 1000, home: /home/ubuntu } — no useradd step emitted./charly-languages:pixi — pixi package manager + env paths (/home/ubuntu/.pixi)./charly-coder:nodejs — Node.js + npm (generic nodejs)./charly-coder:build-toolchain — same Debian -dev packages as /charly-distros:debian-builder.When the generator emits the Containerfile for this image, the bootstrap section contains:
# User ubuntu (uid=1000) adopted from base image (declared in build.yml distro.base_user) — no useradd needed
WORKDIR /home/ubuntu
USER 1000
No useradd, no groupadd, no usermod -l rename. The upstream ubuntu:ubuntu account is honored verbatim — HOME, npm prefix, pixi env, cargo home, sudoers all derive from resolved.User = "ubuntu". See /charly-image:image "user_policy" and /charly-internals:generate-source "writeBootstrap".
Declares builds: [pixi, npm, cargo] and is referenced from ubuntu: as:
ubuntu:
builder:
pixi: ubuntu-builder
npm: ubuntu-builder
cargo: ubuntu-builder
During charly box build ubuntu-coder, cargo/npm/pixi-owning candies get their FROM ubuntu-builder AS <layer>-<type>-build stages from this image, then COPY --from=<stage> --chown=1000:1000 /home/ubuntu /home/ubuntu into the final ubuntu-coder. (The --chown=1000:1000 numeric form works uniformly regardless of user name — see /charly-coder:build-toolchain for the builder-artifact COPY pattern.)
/charly-distros:fedora-builder — RPM-family, user:user uid 1000 (create)./charly-distros:debian-builder — deb-family, Debian 13, user:user (create — Debian 13 ships no pre-existing uid-1000 user)./charly-distros:arch-builder — pacman-family, user:user + yay for AUR.The three builders have near-identical candy stacks (pixi + nodejs + build-toolchain). The only meaningful divergence is this box's adopt-mode ubuntu:ubuntu identity.
charly -C box/ubuntu box build ubuntu-builder
charly shell ubuntu-builder # drops you into /home/ubuntu as uid 1000
id # uid=1000(ubuntu) gid=1000(ubuntu)
Typically not invoked directly — it's a build-time dependency of /charly-coder:ubuntu-coder.
charly -C box/ubuntu box list | grep ubuntu-buildercharly shell ubuntu-builder -- id → uid=1000(ubuntu) gid=1000(ubuntu)charly shell ubuntu-builder -- pixi --version && node --version && gcc --version/charly-distros:ubuntu — parent base; declares base_user: in build.yml./charly-coder:ubuntu-coder — the consumer that this builder serves./charly-distros:debian-builder — deb-family sibling without adopt mode./charly-distros:fedora-builder — canonical RPM-family sibling./charly-languages:pixi, /charly-coder:nodejs, /charly-coder:build-toolchain/charly-build:build — base_user: declaration format in build.yml distro.*/charly-image:image — user_policy: field (auto / adopt / create) and the decision table/charly-build:generate — adopt-vs-create writeBootstrap emission modesMUST be invoked when:
ubuntu-builder itself.ubuntu-coder build (this is the source stage; uid 1000 = ubuntu by adoption).${HOME} = /home/ubuntu (not /home/user) inside builder stages.tools
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
development
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
tools
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
tools
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.