| name | skills-readme | ||
|---|---|---|---|
| description | Routing table for fsdk-containers skills. Load when onboarding to this repo or deciding which skill applies to your task. | ||
| metadata |
|
fsdk-containers brings distroless patterns to freedesktop-sdk (FSDK) containers.
Start at AGENTS.md for the project model and hard rules, then
load the focused skill for your task.
| If your task is... | Load |
|---|---|
| Add a new distroless image (python, node, etc.) | add-new-image.md |
| Add a component + stack only, no OCI image (e.g. a tool for a future VM image) | add-fsdk-component.md |
| Add a non-distroless nspawn machine image (dev env, tarball) | nspawn-machine-image.md |
| Add a bootable EFI/raw VM guest image (QEMU disk) | vm-podman-guest.md |
| Make an image smaller / apply the SLIM recipe | slim-an-image.md |
| Move to a new FSDK release / retag | bump-fsdk-version.md |
| Prove an image is still distroless | verify-distroless.md |
| Supply chain security (signing and SBOM) | signing-and-sbom.md |
| Add donate-clanker VM artifacts | donate-clanker-vm-artifacts.md |
| Write or debug a CI workflow | ci-tooling.md |
| Run local/agent builds on the ghost cluster (remote execution) | remote-execution.md |
| Set up custom builds and configure GHA/BuildStream caching | custom-builds-and-caching.md |
| Automate ArtifactHub submissions | artifacthub-automation.md |
| Container quality standards and SRE tagging | container-standards.md |
| Run or respond to a security audit / review | security-review.md |
| Finishing a task (always) | skill-improvement.md |
Workflow knowledge and operational runbooks any agent needs to work in this repo.
Not here: agent-instruction files (AGENTS.md) — loaded separately by tools.
- BuildStream runs in the FSDK
bst2container viajust bst. Nothing to install butpodman+just. - Local/agent builds execute on the ghost cluster's BuildBarn grid by default
(
just bstinjects remote-execution config);BST_LOCAL=1is the explicit opt-out. CI runners build locally per-arch. - Compose from FSDK
components/*, neverplatform.bst. - Slim by default; keep tzdata + common charsets + CA certs.
just verify(4 gates) is the merge contract.elements/targets.jsonis the single canonical manifest for the OCI image build/manifest matrices — see docs/skills/ci-tooling.md.