Podman 5.4 rootful¶
Podman 5.4 rootful nested-container image built from source on Fedora
Image: ghcr.io/strukturpiloten/podman-5.4-rootful
Declared image version: v5.4.2
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful
Declared runtime base: registry.fedoraproject.org/fedora-minimal:44@sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40
Image source and metadata · GHCR package · Detailed guide
Choose and inspect¶
Declared upstream software: 5.4.2
Declared tags: v5.4.2, v5.4, v5, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.
Registry status: observed; checked at 2026-09-28T10:16:35.528986+00:00.
Observed latest index digest: sha256:8b84814aefda099bf9f08487e470740e28a2914a6d9c85d434e819f7800eb9fb.
Pull the observed immutable artifact:
podman pull ghcr.io/strukturpiloten/podman-5.4-rootful@sha256:8b84814aefda099bf9f08487e470740e28a2914a6d9c85d434e819f7800eb9fb
A CLI check can run without a nested workload:
podman run --rm ghcr.io/strukturpiloten/podman-5.4-rootful:v5.4.2 podman --version
Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.
Support and runtime contract¶
Lifecycle: legacy; admission: isolated-test; review after: 2026-12-31.
Pinned historical Podman source is retained for compatibility; OS refreshes do not patch that engine line.
Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.
Declared runtime test contract:
{
"podman": {
"mode": "rootful",
"outerPrivilege": "privileged"
}
}
Registry aliases and history¶
Aliases resolved to the observed current digest: latest, main, v5, v5.4, v5.4.2.
Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33285198564-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33337900597-1-sha-be7bec347366a7201561b2a21910c551938d840e, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33370489884-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33979947867-1-sha-8161fb6edc41a041ebe8a2bb6390b7928db43bab, run-34058419772-1-sha-ae663e146f2f4dadab117dd7f4e104dd5f41f947, run-34162502635-1-sha-e31c2e2622f4d84e2f7b9edec32820587e708b80, run-34731513294-1-sha-f9826c90ce00f2b7c0ea67784f41bc7b51a8ac56, run-34797985735-1-sha-b7c5604ec0003e661ee25a422a359db4f1ceb1cd, run-36314415610-1-sha-e942a6c88b797f1b5c102f15f73a0a7afc4f5abb, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, run-36403903698-1-sha-c4007b5be49b13e58af5691f892a748e3e6ab270, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-30faee7ada474e455a43b7abf2d90bbf24977056, sha-699c4fd9be1a508c33387aa87e6211de92d6e480, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8161fb6edc41a041ebe8a2bb6390b7928db43bab, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-ae663e146f2f4dadab117dd7f4e104dd5f41f947, sha-b7c5604ec0003e661ee25a422a359db4f1ceb1cd, sha-be7bec347366a7201561b2a21910c551938d840e, sha-c4007b5be49b13e58af5691f892a748e3e6ab270, sha-e31c2e2622f4d84e2f7b9edec32820587e708b80, sha-e942a6c88b797f1b5c102f15f73a0a7afc4f5abb, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f9826c90ce00f2b7c0ea67784f41bc7b51a8ac56, sha256-037086d66f787dde22f8cd5499d8c67dc9206cfd0ab673addf91c6492fef4746, sha256-06a9d5d155b35c50bced9d4b99a06b6ea6b2d9f9fc35cd8c5cf260d8b32dcc0f, sha256-0e8e8bfc3bea1bf52854399aa8cc80a554e3435e6af5dc641351167a0c5a7dec, sha256-13c049308cf09c0f17e23ed2a090d3362cffa434ad56765f04e32c4df639aa0c, sha256-1b071cabf86c1e7c5bb468b79e8d9d33087fc3c2c6993abd54f9b3675df04127, sha256-2df842cdb331b9a120b66da3fdbe88be11f878826407114cd9cf72a466760eef, sha256-2f38e1382dc3a43e25abfa054e003c58cc9dd5760d51b6fb1fe4d119355a42ac, sha256-3b369d7cf00ad972f8961b94f9973b96f4e54e5e9721f0700a3f6d7d6c3bf20d, sha256-3b89103de171fec4e85c4a23ed8b756e604d6c72c8f1f3c1807fdd03741fad5c, sha256-3e65317a8a53aa6cc04d87d8e8b8d947afd29a7ab5521cd7bd5f95fb221028c3, sha256-3f5a528908c45cd63cd6f7e13e650d1798e8977b5e388a703dac57a707e2239c, sha256-4169d791912665a904e506b48cbbcdfbbe98f87df32dabede533a79c045af354, sha256-46a679fb46cd718c037182153a7a678b23b44aae530220adff103dc74c8fa8b5, sha256-4b839025ac9b307b69023c593cff90e7b7a659490679366a564c294aabdb3899, sha256-4db33d0fcc6e3c453bc3136c51a321a41570fc491baef0809e4610053a4b3066, sha256-5281e173c2f44b9bcdadcedcc725b7eebde27f0e2831396af07ecc809042d257, sha256-536ffc7a3b2da86629ab46d9b386f187cbfeed3095d7a266494f37ccc37c628c, sha256-600266dafc494661b9c1c2fa852da6afffb23e4ef5036be0b5c00935fa6f752e, sha256-611d86a47c84f90018452b15424c89a8edbf4c42efcef06c3800e70bf3b0de54, sha256-66fb7018608a4a3f60bcc3637d4be2e2bd505d8d7032764d2298ea223cca0763, sha256-68d39f76b83b6defac604711065533b71a8f50c26aae7bdc3f711cc52f299ac5, sha256-69e7989c98d2d781e6e2d7d69ab94b06ef7efbd8cf08392d1171cd185e70fb65, sha256-6c156d0bb61d585d7c213937717544cb699e334ec5c937c9199d2c05fe178653, sha256-750a24d3ef64fe81301d48dddda9bcf4092350dad433de7c390f0dfe4cf92bf9, sha256-889a03fbb5a6d4523f5d719d13a70f85cec30ea963fe01c7ca89d6456a9d0795, sha256-88b81dd871aa209adb63b2b524802a99905ef123b7f60c1f15f1031544e6ff6b, sha256-898b0a793f26d507a2813f5113939cce8b7e2bf2207f278016e47ab9c6dc3fad, sha256-8b84814aefda099bf9f08487e470740e28a2914a6d9c85d434e819f7800eb9fb, sha256-8b8ab60c1631e54f2a733ca4f35f5dc881f6a60ff319801611b87b5005c821bf, sha256-8ea5f297351c0e47b5b87890d65ee63b592566b96be388a694b79d31eb4b78fc, sha256-924271fd4a0635bebe0eb343e9e4a1260c18e9d6ffeb0d9d76bf77f8a3aff706, sha256-929a373768d0ddfdb998fff8faf1870116c7e547908d802001f8adbb64c63df7, sha256-93f53db94594203a6310f9f2ab802030f93bccecb736f9690d339a0867c67830, sha256-988644d64433b0e205613dcb6fad33ac4a8a82e854a492e5cf9004405db3a292, sha256-994da686c2813fe284ac075538017da9a487e6644575d32d20f189adb06b993e, sha256-99f7ad9471179cb0be7da3e871a27703c90e1e7567a038b6e80d085148b8d34f, sha256-9a60c5e40682f651aa8216490796188e0332cc892ef052acdfa0b43a6093071c, sha256-9cfdb81ba4db313a15a12eb88fb55ebe497e435c6b969b02182af52a64f65b48, sha256-a4c6b0478e1249cc5e7661726a36ccabdb2e9317b1364c22c6cbcf4324c4a811, sha256-a6f9a8abe7118bd6aeada5300f209d2f03033b83080f762f469585f3cc4c5795, sha256-ade23217e72979d84eb9bf8521aba14a4c88ede8885824576669cc22be6ed51f, sha256-bfd81949b456ddd5f989075edc58e7068041abe1d80443b6c4d70334fa79383e, sha256-c2115ca6688afeaa80c0b39e0c69cc635354284722cb9c159f5c1ba82f051c75, sha256-c7f15116ecc3b8498531d6763ab4c71e126baf794933b2efca60d743f1c14506, sha256-cb824815226152d8ff892da7af09536bf2b715da5eecd727b09addf168c529c8, sha256-ce702a9aeb3886b4807dd1fe01a51bab0dc0c04323aade180c14a0598ab7f5d6, sha256-d31736edc4e4138f06e28067b4b6dd5d6683bcd68cce1862c0a3f3054d5f55cd, sha256-d994d0d2a68f02bd40999a646da034b8e4d25c3ca7a8b468460a4f74b52032bb, sha256-dabf9020d04ed9992fbdfe631efbb766a33ddc798205064d5f009106513e66c8, sha256-e2bfa56bbf2d4eabaa950184b43d090c4887b801edb317bfa3d94db1f7f8a35c, sha256-e5d25db4075ca2eb73a1c8cd79db09e235126681fdc567ef550820613fcc66a0, sha256-e6ecebcc0c98cfd272e29e2ebcb66d4853dfeed8d5c93efe0e6ee8419ec135f7, sha256-ea04ff1935bb54b90aa3aa161c25ecf164edf4bbaaa99e0cd3c5c5405c5e4980, sha256-ea64c86b272078ffc95aa3f0d28f0462d18709242ff2886b3c2ec5b9f666c87f, sha256-eb8ff82c89d4408a2c59a4ab0fff244a05d7a5b3d45b3bf0df51ad51269d6e56, sha256-f7d9a03eaf928cc7c848ed489db74c43e02595b384248786e5cc76366ad738a2, sha256-f813b7c8268cf13bdc8bc7ee87576c64dffa92f124445f84e60ab15b9be01b03.
Evidence and timestamps¶
| Field | Observed value |
|---|---|
| Source revision | c4007b5be49b13e58af5691f892a748e3e6ab270 |
| Build succeeded | 2026-09-28T09:47:05.666979+00:00 |
| Published | unknown |
| Registry checked | 2026-09-28T10:16:35.528986+00:00 |
| Evidence | verified |
| Compared with current declarations | matched |
Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.
Maintenance release · Evidence asset
amd64 OCI config and labels
Manifest: sha256:536ffc7a3b2da86629ab46d9b386f187cbfeed3095d7a266494f37ccc37c628c
Config: sha256:3249310beed4b9e9239c19d691a7db3c3b6f6b50fd040debe10b94eb8e5c1e88
Config created: 2026-09-28T09:30:05Z
| Label | Value |
|---|---|
| io.buildah.version | 1.43.4 |
| org.opencontainers.image.base.digest | sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40 |
| org.opencontainers.image.base.name | registry.fedoraproject.org/fedora-minimal:44 |
| org.opencontainers.image.created | 2026-09-28T09:30:05Z |
| org.opencontainers.image.description | Podman 5.4 rootful nested-container image built from source on Fedora |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/c4007b5be49b13e58af5691f892a748e3e6ab270/images/podman/podman-5.4-rootful |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | c4007b5be49b13e58af5691f892a748e3e6ab270 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | Podman 5.4 rootful |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-5.4-rootful |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 5.4.2 |
arm64 OCI config and labels
Manifest: sha256:e5d25db4075ca2eb73a1c8cd79db09e235126681fdc567ef550820613fcc66a0
Config: sha256:9e0fa02b49b738ca8c4851af1a406df532491f8477d2cd6746b7c677cb7972d6
Config created: 2026-09-28T09:30:05Z
| Label | Value |
|---|---|
| io.buildah.version | 1.43.4 |
| org.opencontainers.image.base.digest | sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40 |
| org.opencontainers.image.base.name | registry.fedoraproject.org/fedora-minimal:44 |
| org.opencontainers.image.created | 2026-09-28T09:30:05Z |
| org.opencontainers.image.description | Podman 5.4 rootful nested-container image built from source on Fedora |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/c4007b5be49b13e58af5691f892a748e3e6ab270/images/podman/podman-5.4-rootful |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | c4007b5be49b13e58af5691f892a748e3e6ab270 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | Podman 5.4 rootful |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-5.4-rootful |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 5.4.2 |
GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.