360 Secure SkillHub
360 安全技能中心

Obsidian Official CLI Headless

该 Skill 面向无桌面环境的 Debian/Ubuntu 类 Linux,安装官方 Obsidian CLI,创建专用非 root 用户、Xvfb 虚拟显示和基于 ACL 的 vault 访问,并生成 /usr/local/bin/obs 包装命令,最后验证 help、vault、daily 和 search 等命令。不适用于 notesmd-cli 或轻量 Markdown 场景。

darinrowe
darinrowe
热度 85.38
最近更新 2026-05-18 12:20:31
分类:知识依赖:代码执行 / 读写文件 / 第三方 API应用场景:自动化脚本 / DevOps / 工作流 / 笔记整理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add obsidian-official-cli-headless
Metadata
name
obsidian-official-cli-headless
description
Install and adapt the official Obsidian CLI for headless Linux servers by using a non-root user, Xvfb virtual display, ACL-based vault access, and an obs wrapper command. Use when the user wants the official Obsidian CLI (not notesmd-cli) on a Debian/Ubuntu-like machine without a normal desktop session, or when root/GUI/display constraints break native CLI use.

Obsidian Official CLI Headless

Treat the official Obsidian CLI as a desktop-first app adaptation problem, not a normal CLI install.

Core rules

  • Use this skill only for the official Obsidian CLI.
  • Assume headless Linux needs a dedicated non-root user, Xvfb, and a wrapper command.
  • Prefer ACLs over ownership changes when the vault lives under /root.
  • Prefer one target vault.
  • Keep the user away from su - obsidian and display details by exposing /usr/local/bin/obs.

Fast path

  1. Confirm the vault path. Default to /root/obsidian-vault only if the user does not specify another path.
  2. Run scripts/install_official_obsidian.sh as root.
  3. Run scripts/configure_official_cli.sh <vault_path> as root.
  4. Run scripts/verify_official_cli.sh [vault_path].
  5. Report the wrapper path, active vault, verified commands, and remaining caveats.

What this skill owns

  • Official Obsidian .deb install
  • Headless runtime dependencies needed for field use
  • Dedicated obsidian user
  • Official CLI enablement via ~/.config/obsidian/obsidian.json
  • Vault access via ACLs
  • /usr/local/bin/obs wrapper
  • Verification of help, vault, daily:path, daily:append, daily:read, and search

What not to do

  • Do not use this skill for notesmd-cli or lightweight markdown-only workflows.
  • Do not expand into plugins, sync setup, theme tuning, or full desktop environment work unless the user explicitly asks.
  • Do not broaden permissions more than needed.

Wrapper model

The wrapper should effectively run:

su - obsidian -c 'cd <vault> && xvfb-run -a /usr/bin/obsidian --disable-gpu ...'

That is the stable operating model on a headless host.

Verification commands

Use at minimum:

obs help
obs vault
obs daily:path
obs daily:append content="skill verification"
obs daily:read
obs search query="skill verification"

References

  • Read references/architecture.md when you need the rationale for non-root user, Xvfb, ACLs, or wrapper design.
  • Read references/troubleshooting.md when the install works partially but CLI behavior still fails.

Report format

Keep the result short:

  • installed version
  • wrapper path
  • active vault path
  • verified commands
  • remaining limits