Podman 5.4 rootless¶
Podman 5.4 rootless nested-container image built from source on Fedora
Image: ghcr.io/strukturpiloten/podman-5.4-rootless
Declared image version: v5.4.2
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless
Declared runtime base: registry.fedoraproject.org/fedora-minimal:44@sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40
Image source and metadata · GHCR package · Detailed guide
Choose and inspect¶
Declared upstream software: 5.4.2
Declared tags: v5.4.2, v5.4, v5, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.
Registry status: observed; checked at 2026-09-28T10:16:35.535680+00:00.
Observed latest index digest: sha256:febc3f45332cdbb6777ee4d4c43702b3c6d5e985e087f23d8033065e4219752d.
Pull the observed immutable artifact:
podman pull ghcr.io/strukturpiloten/podman-5.4-rootless@sha256:febc3f45332cdbb6777ee4d4c43702b3c6d5e985e087f23d8033065e4219752d
A CLI check can run without a nested workload:
podman run --rm ghcr.io/strukturpiloten/podman-5.4-rootless:v5.4.2 podman --version
Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.
Support and runtime contract¶
Lifecycle: legacy; admission: isolated-test; review after: 2026-12-31.
Pinned historical Podman source is retained for compatibility; OS refreshes do not patch that engine line.
Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.
Declared runtime test contract:
{
"podman": {
"mode": "rootless",
"outerPrivilege": "unprivileged"
}
}
Registry aliases and history¶
Aliases resolved to the observed current digest: latest, main, v5, v5.4, v5.4.2.
Listed without digest resolution: run-32739402388-2-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33285198564-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33337900597-1-sha-be7bec347366a7201561b2a21910c551938d840e, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33370489884-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33979947867-1-sha-8161fb6edc41a041ebe8a2bb6390b7928db43bab, run-34058419772-1-sha-ae663e146f2f4dadab117dd7f4e104dd5f41f947, run-34162502635-1-sha-e31c2e2622f4d84e2f7b9edec32820587e708b80, run-34731513294-1-sha-f9826c90ce00f2b7c0ea67784f41bc7b51a8ac56, run-34797985735-1-sha-b7c5604ec0003e661ee25a422a359db4f1ceb1cd, run-36314415610-1-sha-e942a6c88b797f1b5c102f15f73a0a7afc4f5abb, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, run-36403903698-1-sha-c4007b5be49b13e58af5691f892a748e3e6ab270, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-30faee7ada474e455a43b7abf2d90bbf24977056, sha-699c4fd9be1a508c33387aa87e6211de92d6e480, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8161fb6edc41a041ebe8a2bb6390b7928db43bab, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-ae663e146f2f4dadab117dd7f4e104dd5f41f947, sha-b7c5604ec0003e661ee25a422a359db4f1ceb1cd, sha-be7bec347366a7201561b2a21910c551938d840e, sha-c4007b5be49b13e58af5691f892a748e3e6ab270, sha-e31c2e2622f4d84e2f7b9edec32820587e708b80, sha-e942a6c88b797f1b5c102f15f73a0a7afc4f5abb, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f9826c90ce00f2b7c0ea67784f41bc7b51a8ac56, sha256-00ffee6c24d3bd319811e324bbd240c93f0e91c964f212f675e1b92efe4762e1, sha256-060ddf2363b79f76be51945e1b32d40fff6c0deabe79eb062975da3741d5e60b, sha256-066749119fe8784204e1116f371ab6acd9b8b320a5e0f6c0ac7f252733284d6a, sha256-0c0df68ee76509bcf3ff702708f692ca5785a05f2cafdec3c44f1b60bc58967f, sha256-0fbea8ce1c3788ee86eb311dfb8844e5f9e8445a8eee6e8242a95d64d59eda5d, sha256-1066db175ef012587ae8bcf53731b5b65509bb853fb8285a5e9c08c214dac54f, sha256-14f4bc1604c5869e6d95c5bfd9c46a9fca887f56a0b7d9d3be22702da39d5534, sha256-1a161d0f1875ede373c8717eea8d5dbe0122fa37a0e073e1bb43519275ce23e8, sha256-212459b0c9ae34b957bda3cddab21de3c37dcac215966a9b4406bfd53d029902, sha256-24228f76f2296a283221db27f574a2cf28cdbec4d435e3876fff3b32c2dd6776, sha256-26f1c8113f42d5204e2490503938b5e180edb13db25bf3210f1c1e20330e0c47, sha256-281e5a2b2c770db90d04d78f3337586cc3f5bc193ecde4807408ba4981954127, sha256-30bd242c6379877f4f644de535b866274b0eb6b6c4d705ad29d68bd17c3e688a, sha256-30ca572763eb5f78b1a3673ca2ca9e49aaa6b01c99d1d84ebf49d36578264f7a, sha256-34e3c111d986a07115dd1826359e820852416af04547affd32abeaa38fd51f48, sha256-3c09df16b8039346ec352ef84abaf217e9091bd6d3b756c3ad78c2fe8e9684f6, sha256-3e9a3ee94554936792d7416116d8b8092737ca38be489a83765938dae30d4d84, sha256-3eaa7bffcd7e942c72a136dc46ff7d02798609855adef3d58334c4103d9c3898, sha256-429cf29dbb6272e0051f8b39e55d284422d39b12fb205d6b5e9fe7a248479502, sha256-48dc3d5f782c14f09d204b332adb8c56994e7f43c5ef74b04f8a8c7c5b7cd5d0, sha256-4e4aa47ef8a39388a67ae56bc6dab1f20763772c996f584542ebf1b5c23b8c94, sha256-59a51a039a917e926f883348a313525aff3750bbdd474d068933d31bcfd09e18, sha256-5f601d70c7fdf1bf0e58be96cc2ee90d2ade01e22ca1c5a907fe35382e8a6244, sha256-60275968d1ca650dbf61f8a6509f5ccc89a81102150e5513c96ac4c5878de925, sha256-6234ed8c8504e7e0592e835d7fb7e390fc31dc05d775e9c2c15e380d48b75d2c, sha256-6618bd78f013dd5ef37002c7fcd2aab34cafaa5a35679c3825279395ee6ddab4, sha256-664eefcdd2bcaaa44c6f2386e35f31e60b9259f235c8e935e7c130cd1174a64b, sha256-75aa84c6999a4d7a457bd7e8e66a65bbbb1398282580fc830a4905bea3544adb, sha256-78adce920449451de59a4cfd14cbc79136fd91b995546c2ae7804906fb89388c, sha256-790ca3a048e9a549fe30b846c6852a88e7ffb2586b421a591b1bfb0478323e01, sha256-812705d56981d9364c63730c7d8e25cda8f7b5d79791042040adcd1f4fdeae03, sha256-817126f5542f4016f5369a720be2d497ac935f5a9eb3b24702a8c8c068584bc6, sha256-8183696e5e3b3053a06635d541c990f3d373d86babe8a94017f6b0403e841897, sha256-878a541b03f5efe6e5b910ebe421f21644bc85e3f9ab3b01fd77d9f03f148ce2, sha256-8aa97d46b69c6f1554bb60df187bb9f5ae5a4108fef5042a8819be1c6e76bc18, sha256-93bdf6b5a76a50fd95888e55662bb16f544f1328c2fb12b42f3a3997aa6c8d52, sha256-99894b2f9014cae1f5c018bd8db474e4fb5663180a5e8a91737457e19e983b5c, sha256-9e9e7e4e58e977747f7b8772fcdabebcddca0ac10319416fd45f010b9d79cb09, sha256-adc75505084d7bbdf211afca6a5c416f1f98930faae923d2938266711f900320, sha256-b69a73e68caf5f15bf11f1b9ad695199612b7b11cb8e1fd806e4e187f90376b0, sha256-b8a5c66896ac6d54ab2a7de03736d27cb5b623319967af6888fab9a9bd6058f0, sha256-c06e2a97a8239e09b6a098f04e10760f82d12b66757dd652a929627ec8b5c0b5, sha256-d218c4898db76b6258c37501baa43c643786345e04d6ee2b2a2d4e84d89a3e45, sha256-d5aa2f6d1e65784f7009778c561a6b1924ebfc74bc596385d924a72782d4f503, sha256-d73013d80ffd3a19933f5094adda9d75d22f28b9b39e38519f2b7643e44d607b, sha256-d773121de64cb90dd41108f2961372bed1b4aa723b28b2205567dcda58f2dd70, sha256-e58cee2f7329ca4d52fd69c3d6eadab0a733f0f3efdf0781af5abafb74df3464, sha256-e9387b735ad818496a26489a2407db99d5da97d9058ce7f344ca6fde25b564ca, sha256-e94e360487ca81f4a13191122df230ebc5a78fac5e37c66f492f14a97be0b4ae, sha256-ea1d4747fa5678604713bd7682f41763e9a05cbb1ab397632724127fc3707cc9, sha256-ea3413acc2d614783c8c1466e086c9d3d9c3a26b6b405781a6c5f2f5cfc82de6, sha256-eae888fef8d00ba153e88e43e2519bba5761e1ca53f4c180b9dc8df0ffe59c4a, sha256-eef4c2368a66c95ee5450ccdd6dcc3fcaaf1318df312c48d04fd533ca66e010a, sha256-f4dc8ca9f1e82aad1764a5737f77fe054dba5595ca34437f33ff3e1fcd8bb12f, sha256-fd5b3084167d4baf1aa8f94cf8be488babf1f667d4127162190e54e7fba5d791, sha256-febc3f45332cdbb6777ee4d4c43702b3c6d5e985e087f23d8033065e4219752d, sha256-ff9d4a7fdfa266c2df38d3a99046c705f42173cbfa4eb0665920d32f9e96520e.
Evidence and timestamps¶
| Field | Observed value |
|---|---|
| Source revision | c4007b5be49b13e58af5691f892a748e3e6ab270 |
| Build succeeded | 2026-09-28T09:46:25.435630+00:00 |
| Published | unknown |
| Registry checked | 2026-09-28T10:16:35.535680+00:00 |
| Evidence | verified |
| Compared with current declarations | matched |
Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.
Maintenance release · Evidence asset
amd64 OCI config and labels
Manifest: sha256:ea3413acc2d614783c8c1466e086c9d3d9c3a26b6b405781a6c5f2f5cfc82de6
Config: sha256:6462eb3ec5d670fd01e41ee62e01f91b0f6b48ba97a2a96bacd5c26ad6411533
Config created: 2026-09-28T09:30:05Z
| Label | Value |
|---|---|
| io.buildah.version | 1.43.4 |
| org.opencontainers.image.base.digest | sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40 |
| org.opencontainers.image.base.name | registry.fedoraproject.org/fedora-minimal:44 |
| org.opencontainers.image.created | 2026-09-28T09:30:05Z |
| org.opencontainers.image.description | Podman 5.4 rootless nested-container image built from source on Fedora |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/c4007b5be49b13e58af5691f892a748e3e6ab270/images/podman/podman-5.4-rootless |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | c4007b5be49b13e58af5691f892a748e3e6ab270 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | Podman 5.4 rootless |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-5.4-rootless |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 5.4.2 |
arm64 OCI config and labels
Manifest: sha256:30ca572763eb5f78b1a3673ca2ca9e49aaa6b01c99d1d84ebf49d36578264f7a
Config: sha256:628ffed309202aa2fd262668f9eb35824e61da827b5514e1ea879e8bf15fb4f9
Config created: 2026-09-28T09:30:05Z
| Label | Value |
|---|---|
| io.buildah.version | 1.43.4 |
| org.opencontainers.image.base.digest | sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40 |
| org.opencontainers.image.base.name | registry.fedoraproject.org/fedora-minimal:44 |
| org.opencontainers.image.created | 2026-09-28T09:30:05Z |
| org.opencontainers.image.description | Podman 5.4 rootless nested-container image built from source on Fedora |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/c4007b5be49b13e58af5691f892a748e3e6ab270/images/podman/podman-5.4-rootless |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | c4007b5be49b13e58af5691f892a748e3e6ab270 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | Podman 5.4 rootless |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-5.4-rootless |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 5.4.2 |
GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.