Arch Linux Podman rootful¶

Arch Linux distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-arch-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64
Inner mode: rootful

Declared runtime base: docker.io/library/archlinux:base@sha256:f3691b4dde62ba4c4b6f0ae2c1fbf28e8c0c8c4b9a35c7e06dc1f70e21aa29f6

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:02.025228+00:00.

Observed latest index digest: sha256:a88920d64221f5cfc1ae3a4d2cd1fd92be87b39524b872b96b1b932fd091d327.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-arch-rootful@sha256:a88920d64221f5cfc1ae3a4d2cd1fd92be87b39524b872b96b1b932fd091d327

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-arch-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: experimental; admission: isolated-test; review after: 2026-12-31.

Rolling distribution compatibility fixture; installed engine and package support must be reviewed for each rebuild.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33188736697-1-sha-82f6bd993fc126419f4fa2df4d9ac1dc069b3bd2, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33602056264-1-sha-ee02d801dd7d68773bf5cc143dfb36790623f389, run-34299839221-1-sha-a0402f4a11d83a2a23fc99168a5efc68b2f8ac42, run-34908057297-1-sha-a420f398c6a66540bd710adc548efcba8900ee71, run-35500917121-1-sha-c2dbe80eff6bcf0d7ac74506af13651f32d1efcd, run-35661202011-1-sha-a2aa93eca8c8042f2cf90dda0260a03fe6803f53, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-82f6bd993fc126419f4fa2df4d9ac1dc069b3bd2, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a0402f4a11d83a2a23fc99168a5efc68b2f8ac42, sha-a2aa93eca8c8042f2cf90dda0260a03fe6803f53, sha-a420f398c6a66540bd710adc548efcba8900ee71, sha-c2dbe80eff6bcf0d7ac74506af13651f32d1efcd, sha-ee02d801dd7d68773bf5cc143dfb36790623f389, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-03d68700372e9fbb0b4f8408631a5c3595cf15f1224cb0df7f51a3d73b7582cb, sha256-0c45677733d89c92edea28b791ad42e36e87d55675507136cc4120d4a821636c, sha256-0dab468e37a86725e7b9e132edf5da334d38137d44e93928c629fa665f7497bc, sha256-157da83d3d744fa7318e1ecb42ccaa8a1d9748db5cbb37b99fbc6e4765cf28b0, sha256-17d35c9112600e4fef8bf6194e55d666c4519e132b2c2abd36ad5e66d4a0f712, sha256-2220da796887bca84b9dc5bd740957aa34102e96ca94e7f5c2bc76fe5768c47c, sha256-2318134169f7bc3f030735dfdd1d03bc51100652ee946580f9f2693103889515, sha256-2b352f802035f1667f0bdb4f2f25715b97fd65f70d281b025049dc10e7d7d451, sha256-31f4f890095b7519b5f38923d7279ef4ee984d6e06df5c242060d5ebd233063d, sha256-4ee4d99c36c137fc6243c8ee740956475b2021d0b3b6d5b72aaa5ffecf4d073e, sha256-5746093549801a15727201fb677a1ad435d310e78478f4a47ea50cd99c8e8343, sha256-68b18a68659306a9c610c40b8948f109cbaf2b6327bf4d46a49b464e40a85dfc, sha256-6ecd5794b04d525e1806eff2d16c3ad4fd1cc3979072d41169da7baca2002261, sha256-74ef5a00322175d5b05eadb34c6228506248eb66f9e1fc5c4c389e93e3f1f649, sha256-7566e1365daece58a33aa9ffaf52b51236aea61de822f730f27d9ac54b28ccd2, sha256-809a923aab060bc0f98233b984be47a0fc7c811d46f1b82f453faeb3cff41434, sha256-88c9dbe585d62d85cee4eaa250c6794fd6043c937b503e5d4820e26a0d7475f0, sha256-9c318c7ddfb1551fbaf735a806ee883a4987fc246069661428e335bdff4cc987, sha256-a88920d64221f5cfc1ae3a4d2cd1fd92be87b39524b872b96b1b932fd091d327, sha256-b8cadd8630022d96539d7da80250ae47a65827d63352be2c77af24c06cd51faf, sha256-bc1080492b86419f2f360493e9a742d456f8df83164e5a4388ddcc215c19a037, sha256-ce14392b95b4972aab183bdeda5082044876d37e88fd2db5253e7083f874d8b9, sha256-cf10b054ef789a6cd419d6f28ada1c1b9ee2c175ba9656618e53923d850c83b5, sha256-cf77fe487fe3aaa1de02dae8026bb7dec9235bca93a42caa4b7c8cceea06c5c7, sha256-d12ba92f96659a51fea6cc60e8f4504998a59671ef56ab4015bf48e7a6b289a3, sha256-d80b9095072740612bdd37e317113885a840a5e4b2ff1e3616c6bfc5ddfc866e, sha256-d8a3f6ed1396301aa5877d29ed41b083cc79ad4e28bc90271386e938453c7df1, sha256-de3152269357659c310c15ccd1a54a4204fb35db24842d0c2f4de1f97eca0719, sha256-f48a837e4ee6c0d68e391d043ead115a3a24a9b772b39e5e6d2ad56ab542f92c, sha256-f48c3308e6e08aecf6b9f7e40fb463234627301cfbc6a2c9a17ca2d31c5e6ed2.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.