cardwire-install

Version	2026.243.0001
Repo	box/github.com/opencharly/plugin-cardwire:v2026.260.0911

CachyOS/Arch cardwire INSTALL candy — the ONLY install surface for the cardwire GPU-manager (ogc/cardwire, the Open Gaming Collective’s eBPF/LSM GPU-blocking daemon), kept OUT of the plugin candy so a local R10 bed composing the plugin (check-cardwire-local) stays NON-MUTATING on its host (R1: the install plan executing inside the plugin candy during a local bed’s deploy-add was observed on the operator host). The check-cardwire-vm bed (opencharly/distro-cachyos, goal task 4) composes THIS candy + the plugin candy, so the install runs in the guest. Steps (deploy-scope, root): append the [ogc] repo to /etc/pacman.conf + trust the OGC signing key F79100EF8C802DAB81C323BB8EEA5962FE510E19, pacman -Syu –needed ogc/cardwire, write /etc/cardwire/cardwire.toml defaults (auto_apply_gpu_state=true, experimental_nvidia_block=true, battery_auto_switch=false, battery_auto_switch_mode=“hybrid”, external_display_auto_switch=false), systemctl enable –now cardwired, add the login user to video,render.

Acceptance plan

This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.

Intent	Step
run	add the OGC pacman repo + trust its signing key
run	install the ogc/cardwire package
run	write the cardwire defaults (experimental_nvidia_block=true)
run	enable the cardwire daemon + grant the login user video/render access
check	the cardwire binary is installed at /usr/bin/cardwire
check	the cardwired daemon is active
check	the config file carries the experimental_nvidia_block=true default
check	the kernel enables the bpf LSM (the BPF-LSM gate cardwire’s eBPF blocker needs)