Alpine 3.24 Podman rootless¶

Alpine 3.24 distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-alpine-3.24-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: docker.io/library/alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:16:56.850100+00:00.

Observed latest index digest: sha256:38b5ab6355b57fd2097ecda115a7534e1ea9d2e5642fc3e25dc551fb7f62681e.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-alpine-3.24-rootless@sha256:38b5ab6355b57fd2097ecda115a7534e1ea9d2e5642fc3e25dc551fb7f62681e

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-alpine-3.24-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-35301286457-1-sha-8b0b2e07f2d5aeb0c81d4c790db9378a72c276ca, run-35317240177-1-sha-434d1accc2259ed4e4cbf5b143fa246e22426ff7, run-35393954704-1-sha-f7bb714dd7e8677809a4b654e5ab2651af163d74, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-434d1accc2259ed4e4cbf5b143fa246e22426ff7, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8b0b2e07f2d5aeb0c81d4c790db9378a72c276ca, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f7bb714dd7e8677809a4b654e5ab2651af163d74, sha256-0cf90595f9c9de238c789e5776b6a67167f71927c7bacc22416b86da1c16290d, sha256-217875e259b8dcac590cf49e808cb507fb97b5e9ad6d8710746804df65a0f17a, sha256-234783f9815148e3c7c328596dd2a1e4fd003da08f29d5528033ddc7be12a319, sha256-3877ed0e8a12ccbad060f5bf63db67726cd89c52ec46d5ccabe6222dfa44eb2b, sha256-38b5ab6355b57fd2097ecda115a7534e1ea9d2e5642fc3e25dc551fb7f62681e, sha256-4674521ec1e8a03bd168f4cd34988c7ab59e6ee730e338574289ef0319f0eee5, sha256-54c0b72a26a26a5bcb043d689bb9f65ee4ddad424fa3ee6f8726113bf18f9e24, sha256-5f1e559c70a25c512caa832f3179f74caa4452a3726e08f745493b606d509614, sha256-63ddac367115258b32dd401e5a8a37207c06241f80f0e1c800a2769b5f157360, sha256-690896f9b91af3db0f4b48bf004a5e2a8e800e2d71371b87692a16f21e61c8f0, sha256-6cf71dc32eb18539efcce65db4f5bc60d1b102913cee3a4506bf86b41e092d00, sha256-73c6003eecc110ad275194dc3e5ef13593e7347f1cbd0a29d6542cdf82e374b5, sha256-79ee126aac6487ebac9fef62cc19572cdd321c7835234fd6ddec8e9c54388723, sha256-7fa271a3b130c895505b644cc3166a112c335e108694e5d4431c51618d3cc1d6, sha256-839cbcf935ac47c4314994b1de03b025546357ae582c98ec50fc8cc0b4784aa7, sha256-8a9cf33d1ba01a35c67ada0f36a3a7462ef54552cd1db682a9d2009de8e0220c, sha256-8db1bc5e102a43f2502f5b76810d03b9aac2f992fdbcd91b38404435f7783cf0, sha256-93bbc44aef0a4ca7790c0bc7fcf3bba513aa23a58087df7b32a8d6f4fdafce7a, sha256-93fe8ca73e92d52eb4f8d01d7671cb9d00eaca52d16e44eced8fca16fdf4960c, sha256-949f66c73f7b85e22e17aed5e6eb98789d9a7c7ff668e279a7fb3bca398d355d, sha256-9d30d4da062fd14d97d170180f9350c0180751bfc58f14d3b951d10cef537d0a, sha256-9e59e585e4fcc5020c80ee51f833cce8d5fd48b11600a63ec62d940c70c4379b, sha256-a9eb108ab26abf39984ada81ec77f9ed53344dfb9970cbd1baf7dc8eab1eff2f, sha256-abac130606fd1f035d108ccda869182e5d3b8c523b11d665378edde0e0e0ac1e, sha256-ad9a8a6ff9a359cbe1ba0aefa5b61d494d3963c5dfa71ee9c97e954ea50c403e, sha256-b66ae565161b5faa3196de669822a6a3fc13941a3517b403415c75a878e57b2b, sha256-bfbc7d54a7e21e945323379e6a19c29cf190aa3773f6955f4998269472dcc645, sha256-bfc712092f43ee3b59e7f16e8769f5b2a04971f6e42cbcfe0a7b4bf42fc86a2a, sha256-c4b1a86354e9d56e89f1eddacae56c9cee54e86c9f157bb08531c61dce4a956e, sha256-d4173323ce0d628d2ca5d20b52bbac523cbe12f83facc3947ce40ec896a04b0d, sha256-e5dcd56542f9bcdf5b9384bb9fabb9c1269d694201512a1648e1f65c1b2dbf0a, sha256-ed1ad7bde61829572cb8415acba943426e505579a8969d0e4f688079d63e27ce, sha256-ee65592ba44113840b98ed47a2ea0d1466d9bb8004f56713b84016acc01410d3, sha256-ef2b5fbbc6e05ab295bc8ef27f4e4fe80c31e34f47935732a16e44725c9ee860, sha256-f74db72ee07f5bb7e07b783129491d64deb29429949d402555cf82d1ceb4fb0e, sha256-fde70bf3bb07679a3d3512a807b061374879c10170f16f57b402ae5fa3fae9f6.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.