From cda372afd9493552d60fba623646807fb7939184 Mon Sep 17 00:00:00 2001 From: charly Date: Thu, 8 Oct 2026 23:08:26 +0200 Subject: [PATCH] fix(docs)!: drop the retired openclaw references from the skill The skill named entities the OpenClaw family cutover deleted (opencharly/opencharly#431). This is a clean PR from scratch: the previous thread reached the auto-close threshold while its findings were being fixed. Agent: openclaw-family Assisted-by: DSH DeepSeek deepseek-v4.1-flash (fully tested and validated) --- charly.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/charly.yml b/charly.yml index 4a7c822..47d5c8c 100644 --- a/charly.yml +++ b/charly.yml @@ -688,7 +688,7 @@ container-nesting-skill: `cap_add:[ALL] + security_opt:[unmask=/proc/*, label=disable, seccomp=unconfined]`, which matches their historical posture. - Rootless boxes like `/charly-openclaw:openclaw-desktop` don't add a + Rootless boxes like `/charly-distros:charly-fedora` don't add a box-level `security:` block, so the resolved posture stays at `security_opt:[unmask=/proc/*]` only — zero capability escalation. @@ -827,7 +827,6 @@ container-nesting-skill: ## Used In Boxes - - `/charly-openclaw:openclaw-desktop` — rootless path; box-level adds nothing - `/charly-distros:charly-fedora` — root path; box-level adds `cap_add:[ALL] + security_opt:[label=disable, seccomp=unconfined]` - `/charly-coder:charly-arch` — same root path as charly-fedora - `/charly-distros:githubrunner` — same root path; doesn't compose the full charly toolchain but keeps nested podman for CI workloads @@ -852,7 +851,7 @@ container-nesting-skill: - Authoring or debugging any candy/box that needs nested podman, buildah, or skopeo. - Chasing `mount_too_revealing` / `mount proc to proc: Operation not permitted` errors — this is the authoritative RCA. - Choosing between `--privileged`, `cap_add: ALL`, and `unmask=/proc/*` — this skill documents why the surgical `unmask` fix is the minimum-privilege path and the others are hammers. - - Evaluating the security posture of `/charly-openclaw:openclaw-desktop`, `/charly-distros:charly-fedora`, `/charly-coder:charly-arch`, or `/charly-distros:githubrunner`. + - Evaluating the security posture of `/charly-distros:charly-fedora`, `/charly-coder:charly-arch`, or `/charly-distros:githubrunner`. ## Related