overthinkos/ov-layers/skills/xdg-portal
ov-layers/skills/xdg-portal/SKILL.md
# xdg-portal - XDG Desktop Portal Infrastructure ## Overview Provides XDG Desktop Portal support for Sway containers. Installs the portal daemon, the wlroots-specific backend (`xdg-desktop-portal-wlr`), and the GTK fallback backend. Enables screen sharing, screenshots via portal API, and file dialogs for applications running inside the container. ## Layer Definition ```yaml depends: - dbus - sway - pipewire env: XDG_CURRENT_DESKTOP: "sway" rpm: packages: - xdg-desktop-portal
development
Updated Apr 27, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins ov-layers/skills/xdg-portalInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 27, 2026, 9:37 AM76.6s1 file scanned
SKILL.md
xdg-portal - XDG Desktop Portal Infrastructure
Overview
Provides XDG Desktop Portal support for Sway containers. Installs the portal daemon, the wlroots-specific backend (xdg-desktop-portal-wlr), and the GTK fallback backend. Enables screen sharing, screenshots via portal API, and file dialogs for applications running inside the container.
Layer Definition
depends:
- dbus
- sway
- pipewire
env:
XDG_CURRENT_DESKTOP: "sway"
rpm:
packages:
- xdg-desktop-portal
- xdg-desktop-portal-wlr
- xdg-desktop-portal-gtk
- slurp
Key Properties
| Property | Value |
|----------|-------|
| Depends | dbus, sway, pipewire |
| Packages | xdg-desktop-portal, xdg-desktop-portal-wlr, xdg-desktop-portal-gtk, slurp |
| Env | XDG_CURRENT_DESKTOP=sway |
| Service | None (D-Bus activation on demand) |
| Ports | None |
How It Works
- D-Bus activation: Portal daemons start on-demand when an application calls a portal D-Bus method. No supervisord service needed.
- Sway config drop-in: Installs
~/.config/sway/config.d/portal.confwhich runsdbus-update-activation-environmentto exportWAYLAND_DISPLAY,XDG_RUNTIME_DIR,XDG_CURRENT_DESKTOP, andSWAYSOCKto the D-Bus activation environment. Without this, portal daemons can't find the Wayland display. - Auto-approve config: Installs
~/.config/xdg-desktop-portal-wlr/configwithchooser_type=nonefor headless automation (no user dialog for screen sharing).
Portal Capabilities
| Interface | Backend | Status | |-----------|---------|--------| | Screenshot | xdg-desktop-portal-wlr | Supported | | ScreenCast (PipeWire) | xdg-desktop-portal-wlr | Supported | | RemoteDesktop | — | NOT supported on wlroots | | File dialogs | xdg-desktop-portal-gtk | Supported (fallback) | | Settings | xdg-desktop-portal-gtk | Supported (fallback) |
Included In
sway-desktopmetalayer (default for all desktop images)
Used In Images
/ov-images:sway-browser-vnc(viasway-desktopmetalayer)/ov-images:openclaw-sway-browser(viasway-desktopmetalayer)/ov-images:openclaw-ollama-sway-browser(viasway-desktopmetalayer)
Cross-References
/ov-layers:sway-desktop— Desktop metalayer that includes this layer/ov-layers:dbus— D-Bus session bus (required dependency)/ov-layers:pipewire— PipeWire (required for ScreenCast)/ov-layers:sway— Sway compositor (required)
Related
/ov:layer— layer authoring reference (layer.ymlschema, task verbs, service declarations)/ov:test— declarative testing (tests:block,ov image test,ov test)
Related Skills
overthinkos/charly
tools
VerifiedTrustedCommunity
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-cachyos
development
VerifiedTrustedCommunity
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-fedora
tools
VerifiedTrustedCommunity
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-arch
tools
VerifiedTrustedCommunity
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.
SKILL.mdUpdated Jun 10, 2026