Alpine 3.24 Podman rootful¶

Alpine 3.24 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-alpine-3.24-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: docker.io/library/alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:16:56.789526+00:00.

Observed latest index digest: sha256:9a3c293ae23118d8e13049d4da9950396effdf945fa699cd64b72ddb9f989d41.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-alpine-3.24-rootful@sha256:9a3c293ae23118d8e13049d4da9950396effdf945fa699cd64b72ddb9f989d41

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-alpine-3.24-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-35301286457-1-sha-8b0b2e07f2d5aeb0c81d4c790db9378a72c276ca, run-35317240177-1-sha-434d1accc2259ed4e4cbf5b143fa246e22426ff7, run-35393954704-1-sha-f7bb714dd7e8677809a4b654e5ab2651af163d74, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-434d1accc2259ed4e4cbf5b143fa246e22426ff7, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8b0b2e07f2d5aeb0c81d4c790db9378a72c276ca, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f7bb714dd7e8677809a4b654e5ab2651af163d74, sha256-014538a1a63eef9e948c0e1bbc71ea62f8eb7cda112a567f16bd9cc41dda86dc, sha256-0385c6bc12901e442b49a6f7be2eea96d75f169e58246ea3f22a88443355e1d3, sha256-0ac834efdbe8cf099c1bdda15a524804d6e15d83f732775201161a3b5de0a4a5, sha256-111f28c97c49f9cc0ee222c67096acb95b15b2f6291936df545aae185623d0e2, sha256-226329bfa2aa47be56cd39b09e99996b055a79a39437411467abccf5e1889280, sha256-3ac6a72e981fee683505905c2c1b8a544740b0ab919944652f06eb7be5f7bdb1, sha256-44ec6be879350233c218678281df0f935865204143969fc737c28ec8fb7c67b5, sha256-44fa7e02196648bef4f485889e0815915575e5bd9d3f68b48b98ef575807b558, sha256-482947aa9f76fa7692dbe9c8effec68bc03490fe623ad544c8cb0bfe3ef4f577, sha256-4b362515dcd0690842907105d9307e5f4f0ace28f7fb7c8317cb8bd93e993c6c, sha256-57739b2c77690024efe4b29f252d7b4e21fbd0b6676a78ad4ec600fc11ce8fc7, sha256-59a03643a7187c9b7f2ac0e704c63df040332546e130543fdae43a6524c52870, sha256-5d866192332f7ec165f54751c16e3af8137862e7fa559acf21a0322c8295e556, sha256-600546ad760473f4d2ce70bb124d789676899a8e8d711a2f3fa25e4369916b52, sha256-6ccf6355cdb81a0fbedc26abbb77070b861d0890bdfb8dfed67abf330f251d04, sha256-7354bc6304518b21312e2d69e311a0ad266c6a1106add129e03236d952a1654b, sha256-77d2e3adb08a22624e224b9b049c21c94ae993bc5b3075b34a90ddcc57b3cedd, sha256-7c0ee1a2cdc8816ce86ca5d5efb6bbb011413732babdf601f58ca5aea8b94e98, sha256-8603f9af13fe9bac4064b80b5f02e1c3cbd3ad5109472ea7d69eed47cafceeb6, sha256-8d00505e15ec2e5a5263ee423575eb5cc0169749211e2b48aae738f0c45cf80b, sha256-8e5e567c04f08c280b0274deab13e4b822c89209a12c08725bd12ac9ef1ee048, sha256-9210e14d94014543d704f086a5e0b935abb0b44f509dcb97109807b595bca322, sha256-969dfc4eaa59b9ac667bc81369ae56a5ed1e394b650ea4586e128380ebbd03f5, sha256-99105b10f91bc9b17455590917ff6fad48e06eaec77de500ee60f8baf8a01709, sha256-9a3c293ae23118d8e13049d4da9950396effdf945fa699cd64b72ddb9f989d41, sha256-a3f369486234fc408a2a38df6253fdede978c279dfe402ad4d222534aa3203db, sha256-af49464945c39293dbacd34cc7ddf65116f4089b7bf7cf1d518fcb586bcf1484, sha256-b3dd7ce1e608159e2b983d7d83020168557aca392b247edfed0be066ea132db3, sha256-b7322117b56924cb3ff531e8a2db8ef1f5f91f1b4277e614a66ca33425291560, sha256-bfdf518634016836717525cf7a94707086ca9f03b3317770b9369faade46c630, sha256-c735dbfa7637899bf469864dc084edb154ff28004764744d8056dfd7a60ad2f7, sha256-d4f8c8a2fac25e7990924e3e38b1271c98a18fee732f628d09f7a9414081c544, sha256-e87e127ae1b7b28099051fca432a9ee4545a062715c10d83b80a90d084bd665f, sha256-ea9638e7b5352442f526256ffaf3598bb85ab693dd379fac1b073f57f7ebca73, sha256-ec88abf2bb1eec404f0e15c322972ca4b6ed6c44fa854792470b85b16ccfa924, sha256-f6ba4f604b93ed7e79544def4879e706da0e9877f28438a5e078d934c100b3fe.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.