Arch Linux Podman rootless¶

Arch Linux distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-arch-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64
Inner mode: rootless

Declared runtime base: docker.io/library/archlinux:base@sha256:f3691b4dde62ba4c4b6f0ae2c1fbf28e8c0c8c4b9a35c7e06dc1f70e21aa29f6

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:04.317245+00:00.

Observed latest index digest: sha256:01384c8b839b18ab4ce8cef66393ebd7dd1b72add8ac7b2b7b63083c0a39153d.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-arch-rootless@sha256:01384c8b839b18ab4ce8cef66393ebd7dd1b72add8ac7b2b7b63083c0a39153d

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-arch-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: experimental; admission: isolated-test; review after: 2026-12-31.

Rolling distribution compatibility fixture; installed engine and package support must be reviewed for each rebuild.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33188736697-1-sha-82f6bd993fc126419f4fa2df4d9ac1dc069b3bd2, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33602056264-1-sha-ee02d801dd7d68773bf5cc143dfb36790623f389, run-34299839221-1-sha-a0402f4a11d83a2a23fc99168a5efc68b2f8ac42, run-34908057297-1-sha-a420f398c6a66540bd710adc548efcba8900ee71, run-35500917121-1-sha-c2dbe80eff6bcf0d7ac74506af13651f32d1efcd, run-35661202011-1-sha-a2aa93eca8c8042f2cf90dda0260a03fe6803f53, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-82f6bd993fc126419f4fa2df4d9ac1dc069b3bd2, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a0402f4a11d83a2a23fc99168a5efc68b2f8ac42, sha-a2aa93eca8c8042f2cf90dda0260a03fe6803f53, sha-a420f398c6a66540bd710adc548efcba8900ee71, sha-c2dbe80eff6bcf0d7ac74506af13651f32d1efcd, sha-ee02d801dd7d68773bf5cc143dfb36790623f389, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-01384c8b839b18ab4ce8cef66393ebd7dd1b72add8ac7b2b7b63083c0a39153d, sha256-0d1d83de9aaecfd0591b156586e2ef68b98193f145054d1acd924b2ebe833b2d, sha256-2715c3f31f21d492086e59ab55a9172f885e392f22b4950662462db334b70b36, sha256-34a9aa5bd35b69556443d18b28889f2f71b741f42350ff2f1acd8b8c69dcc032, sha256-374f9b9c362c4f5cd1e480c342222d2914f562638810e086f8160be3e38f0daa, sha256-38ba2c308e3e8f11a4b107271c55815924511af6e46702fc2d8a509b7a9609f5, sha256-413c26295ea4ddb073ba078eea474783e634751f3c3ae8d1c22c640ddcff8c7d, sha256-43c53f468a5328dd2e1bc7482ffa2b6d268c4474626bac6d35b918931336f443, sha256-4e7232af1332e0d5a10244b669939a5392b85c027bad8d6e770919cfcb88bbea, sha256-55b67a10fcb4bc95cf8c5df5b47df08f19b6bb987309ccde523f0fdb21b0cb2f, sha256-58bceae5c193f126c0a15bc0be48063f8c91ac6f9725c0c3ffdfde5ed54c5a5d, sha256-6a2f0fce8586907b031e8a8a02e97bf390e86d1fdf5a4f04505b102ea5215b74, sha256-6d92cdbfb95d66b0da347fc8ef6b93928f98a940f771a3a4f6c1534f11a2f5cc, sha256-7d9d86b05878545339dcd717d41b2a41de80e7c7f35ebb170d735b7b059650d1, sha256-7ef1a6ad16edfb9e091ab7a20dfa5950a5a0240ddabbdf174ae5441784e00a02, sha256-7f33b5a1817076b6c944f3652ce3c0243a0efd309f844ae0bce5fc959747108d, sha256-8108ec0f0ad6fd56b0ee0f1edbd6a45572cfdc59c1e4e8b620aed35bfd1f517c, sha256-842c132c7867771846a059f656c4569e41138c5a91dc6218dc9d189358e824d8, sha256-870ab6b11a5748b20979bfc0473c10ac58b288b9659b0c2ff98949706c9b1e1e, sha256-88ba132481b7dba7bf877925858289acf8f880866af84201fb50b66beabbb9cf, sha256-93df6b561a237fdee13901f2594c07fbf026c88d56e5c1651e9c7b6ef8c818a5, sha256-95612e822b86d97cd3ac158bcaf1f36c81ba6f8fbc31c9e48f5c2f965fce57b0, sha256-b646b8bc0015225b28de240a322c6e3ac0931b7869b78c872bbd44b59fc25a91, sha256-baf9bcd19eebf6cc2c92b1ea8bba28ebb601983f7d7815c13f30b5187995e111, sha256-bee4e3962b8bbec735cdbf8670cde6019e374799c1f8045e9edaab729298383e, sha256-c37d32ce3193442031ab71762281367c6924945ef0d373d4715802ca3dba216b, sha256-cd7b3f10a03942dd83a2b01aa426bce53acb910e398e8a6facb4f088212b725e, sha256-d01348877aee6b7efe196bedc6537c3457fb85c6bd632e6e52c4d4bb9e558a98, sha256-d1e517241f663b2ab1d45c7baa95f351ada2d2856739ac161378896c4670676b, sha256-fdfa49fdc36eec4432ec236e17d03dd776b767aa74ae1fe94face07907cc2feb.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.