Podman 5.6 rootless¶

Podman 5.6 rootless nested-container image built from source on Fedora

Image: ghcr.io/strukturpiloten/podman-5.6-rootless
Declared image version: v5.6.2
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: registry.fedoraproject.org/fedora-minimal:44@sha256:77dae00ae95866fe18f1ee83f2eed8f1e92db3da0dd8396e35f900f050eb9e40

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

Declared upstream software: 5.6.2

Declared tags: v5.6.2, v5.6, v5, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:16:45.324072+00:00.

Observed latest index digest: sha256:eeb879b139fcd8cac20624b045a7b1b5ae8f499bbe6781acc87269e8571fa223.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-5.6-rootless@sha256:eeb879b139fcd8cac20624b045a7b1b5ae8f499bbe6781acc87269e8571fa223

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-5.6-rootless:v5.6.2 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: legacy; admission: isolated-test; review after: 2026-12-31.

Pinned historical Podman source is retained for compatibility; OS refreshes do not patch that engine line.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "unprivileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v5, v5.6, v5.6.2.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33285198564-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33337900597-1-sha-be7bec347366a7201561b2a21910c551938d840e, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33370489884-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33979947867-1-sha-8161fb6edc41a041ebe8a2bb6390b7928db43bab, run-34058419772-1-sha-ae663e146f2f4dadab117dd7f4e104dd5f41f947, run-34162502635-1-sha-e31c2e2622f4d84e2f7b9edec32820587e708b80, run-34731513294-1-sha-f9826c90ce00f2b7c0ea67784f41bc7b51a8ac56, run-34797985735-1-sha-b7c5604ec0003e661ee25a422a359db4f1ceb1cd, run-36314415610-1-sha-e942a6c88b797f1b5c102f15f73a0a7afc4f5abb, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, run-36403903698-1-sha-c4007b5be49b13e58af5691f892a748e3e6ab270, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-30faee7ada474e455a43b7abf2d90bbf24977056, sha-699c4fd9be1a508c33387aa87e6211de92d6e480, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8161fb6edc41a041ebe8a2bb6390b7928db43bab, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-ae663e146f2f4dadab117dd7f4e104dd5f41f947, sha-b7c5604ec0003e661ee25a422a359db4f1ceb1cd, sha-be7bec347366a7201561b2a21910c551938d840e, sha-c4007b5be49b13e58af5691f892a748e3e6ab270, sha-e31c2e2622f4d84e2f7b9edec32820587e708b80, sha-e942a6c88b797f1b5c102f15f73a0a7afc4f5abb, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f9826c90ce00f2b7c0ea67784f41bc7b51a8ac56, sha256-012942ed15730e84667155695c1ec019a807a0ce60876cd58a3ee5ca7dbfb65f, sha256-0385427d1958ad266d514cd3456e751713d29a1414ce9beeb5737dfd8975a8ac, sha256-063df51b6cddc98c6ec64d4f14e06ac60450adb01946be7e7a88b3d02aababbf, sha256-0c87ef09859bdae0e319c5edb6f6422ede3cb6f9afe2cf206cb90acfd49e9912, sha256-0d9b737c05ecc61a8a7d295ed5ceade83516f85535f3c27f60e6ac54cb6bda2a, sha256-0edfd08b5e762e13fa3f7e33eda2721a3a2afc45aa780ce79e545d0f1af2504d, sha256-102303c2cca7d365162baa47d2dfc9e9daba309b7bd524d0535274ba38625f4c, sha256-1197ccf67db6cd88fa703503ddceddbec017098372c7a50c3364361b041eeed6, sha256-16ba20e4083f02d19341eb849ead1beb12b84a278fd7865f5ae1857017aebee8, sha256-17d2f1302b5371ad9d3f2812018e1d4a64b20c292bdd612d1d01542b8d8bab18, sha256-1e4c6a95d440d2b9a5a6b2ed3e1ce1682ba08c7fc143688e1627a755d6dc9ada, sha256-209eacf7d9be9448a067433c8ba4963b2cffc50c32d8f4b7f0adbc7981f23301, sha256-2160e062b0adeec893e7580e55b7639b60032762cbf51013e86973175cd4150d, sha256-221679af6c32d3c20424ef9021cfcefda72b394bf22781973c2e7395fcac9299, sha256-23c37f534415f9a2d1c40522aeb63e7b5684659e337419b98e24cceddcea1d79, sha256-250017aa12acfe787407c72fc1e8aab4f7811a7e7bffc2dee1fa6ba4a64eceb0, sha256-2f675e39e38c210e9324ee1de5b73f9f579e40d2b4bdc436e494d50d12ac706f, sha256-35fb70c1822433a7c5385100ead1232d31775482d5d9fda22714b756d4dee2f7, sha256-4409705be0782d29b19c1ca47e904b680faaad0dffb9a187385530ee40d8d8f3, sha256-44461261abea63a30f40b3dad3ec19d4b8a1de085c2b1c2eef0af6512c94b4b8, sha256-4835a4a9dcde539379819d43c86f93fcd49f00a9ec3015e0bbe630f719315b55, sha256-4b346596d8e23eb67d1139b4fa6092c587ac4ab3b895884146a7db8605ebb91b, sha256-4f9db6f05cc836a7f7d4bc0f8540a9c77bd4f9e9be610891b66d1dae80212144, sha256-5513ce3b062be6c086b50ebe2052a30c46b9bef88d16d91e94a3dea22e5c441b, sha256-56aeab6b346c598c3588576ec8003b61cd58ee7688841c195f3159b8f37e4a94, sha256-5826ef8e8934cac71b6c22fec1c517c7b2474b38857a9dfe140f20534c8e2646, sha256-61f0e9f79100aff14228d478e1f9ce54c1b270566c24772b8ffed503b4f0e207, sha256-638c31b39de64441e94a13d15b9ad4d917bf261d9ff98a304113ac048372f2c3, sha256-6a1d8a647bc4b88b77663524a844496d72a0c499f36d4ba20ba4704be460b9cd, sha256-6a4520f56233e8147d1c2834bb46a5405270cfcb72dab2d1f42ab180580836d4, sha256-6afc91b1efbaaf510d9c21470e5537ce3bc25ef53a6c2761457fb3517ab52bff, sha256-70723b39eb24c511540eeaac13d80ac77ffffb394a7d01ad04cc2a60ac7823fa, sha256-776b5a30f98793cd4178e8611e47e1627f4d54345df12d151a5c407a9be862b9, sha256-78892ad2b0622894f76abff22b02519faa54bde0b247bffb04c57c9e79f8ab1f, sha256-7c9082228cb47175d5943facfeb0241aa6306a709958ea5aee9e8f37e210da67, sha256-83e12c409e9db9df765b57908ac095f4261ddbff5bb137fde2d8931e898c73ad, sha256-8afcc4797c20df213c1046b4bf3d60fc793b9d43e91fcfd80f424f688bca40d1, sha256-8fea7c929a6da891e1ca9089f599c8dc39ea94679da0dc1cae949dc57b910d9d, sha256-9faf56bbdc6fd9b194e8fc435dc7a6271b23f335e91d736402b8c4a42552a42e, sha256-a6b5fa88721972c2b8d263fabd66be99eb8651e3430a40bace1454336e0fd7e1, sha256-a6d05217c10b9af8f1973b720660ed5e6cce1ed82ae054711e19023c02b40f74, sha256-b8591fef397de4b5f2c4e888e40afcee236377fd3e647e98255ad62b47e8947b, sha256-bb3f8637f0500eedf67332e7f9beed783a4b82b9cb77896698604173de7ab6e7, sha256-c04a910c1fe6f77035b5aa3327a7acf63c54a0cae84e0a553ffbbde5b664ffca, sha256-c8e9c194ffcdb3b4c2d3a421375ef8d8847481eae78bcfbc0bf1fff92fa6bd19, sha256-c9db23d66d8552e548d7b6c869c9acfb7add1f85e7954dab77ba8969bb4bfaf3, sha256-dc41259643a50ac9819d67b06adeaf843e9f487c338950a5bf9bb63ac5c1fee3, sha256-dd639e12b5be09ebcb49a2cc3cb588f15f6181bffc9c57d8f04a186716a431d8, sha256-e0833040debc572ada9a4a87eeec3ed017725a7999fd8abd8e4bebea62bdff37, sha256-e6959c346b3387b6f8f78b786c04f2dd6574f48fd2e47cc8e7a6f1e266d51055, sha256-e83480dfda5e6ecbf07405864c05ebab2e25f4507a15e596b8f9088418274696, sha256-e8569eadf103317a700f2d399320a19bb1f31d5321ecd0d8fad4b2be1557d0ef, sha256-eb4264e955760ffdd804b6e483da23ae3a3a02d2d2603add50c0a5de7fa82792, sha256-eeb879b139fcd8cac20624b045a7b1b5ae8f499bbe6781acc87269e8571fa223, sha256-f704028ac190f622bb1c87b0542d3127762f3707eeb55e17a018ca81bc3ecdbf, sha256-f8abcc940635c15a37ab8fb896bc364de96704111cb1006f50a9f32c96a2aa81, sha256-fdd44cfabb9c3d9d0a21cd9660f7eb609244bfde3ee3be5c434b914ebcb258b3.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.