CentOS Stream 10 Podman rootful

CentOS Stream 10 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-centos-stream-10-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: quay.io/centos/centos:stream10@sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b

Image source and metadata · GHCR package · Detailed guide

Choose and inspect

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:05.794914+00:00.

Observed latest index digest: sha256:2dd5ca4e077fbe5a3643ff171f42c45cba9b19eb20f8c250f1496833ac103b67.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-centos-stream-10-rootful@sha256:2dd5ca4e077fbe5a3643ff171f42c45cba9b19eb20f8c250f1496833ac103b67

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-centos-stream-10-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33709307098-1-sha-663bb59a3ebb4ef928d9ecfde7bb1dd6618c0e77, run-34326686307-1-sha-9edf9ca0c4d67599e8c1bcd15a97c5fb98978548, run-35885114406-1-sha-932dd7c6310a5c89498cb4d5fc389070d39897ed, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-663bb59a3ebb4ef928d9ecfde7bb1dd6618c0e77, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-932dd7c6310a5c89498cb4d5fc389070d39897ed, sha-9edf9ca0c4d67599e8c1bcd15a97c5fb98978548, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-00ad1f09f8b20404855d1a0eda528441994495546d354027181b07d276027221, sha256-066c5d0baef85c64ebac7f497f80f5570348321c346dd9d5786e57a7f139c90f, sha256-08939dd0e492ae0a4eb2b77260e0472c070f20b36a0114ba6fe74592a9684c6c, sha256-11184659c2583259d452d5528ab72a16bbccf71909d2d5cea48573a05227192c, sha256-143aaa7409464d9e180d7b207e499889ff372f71c62f4025498e775990304e43, sha256-1ec44b9964d2adcc5f12b3714ec1e1dcf154892b9e3dfe36031102f74a00dfdb, sha256-20993434833b093957f15c227832327b6d3964a07065763e740f1e432d5957f7, sha256-26eedc63e7069d4bcc92f81e5851e090a839e731c32cb2d44e38f96c55be1f27, sha256-2a9b133e191054f7dbc18ac12f6bdc104e2288df9e7e8ae7dd45515040d60075, sha256-2dd5ca4e077fbe5a3643ff171f42c45cba9b19eb20f8c250f1496833ac103b67, sha256-3dc1ac25fdf4a2628961c45693099146c97da42b242dd8a1b74b177feb1e1d07, sha256-3e09191394e3c3c226eda6c30526e2c711e16aa35e622bfbfe4fff319243c18a, sha256-5a70e080eca8a5ba7837d5ac36681bf1fa528ac0deb3f1ec3689927a21327354, sha256-5d1223eb8fb7ab7ca1f9bf4994303644757b94110db7eff0bf2fb2d718a83de4, sha256-60b40f3a6d3eeda752b9084c1f4993855bc085b92f267f7bc2b80c6213b94ffe, sha256-6573ee6824872435e90e82b348b70be4e666662f9d93a6af6acbad059a0f3102, sha256-66737cd8f6cb4ca5ebc822a393f5168d596266de013258454db06528b4ca2a2e, sha256-75da949e69666f46bdf92ff7f7310367584db2b2d127feb8bede2397262aca2f, sha256-80eb622f44fac9b4f6088bcde86ce5de844843a7902125d4dbbceac34fcbfdc3, sha256-87a5f2e623386a2f89f1bfabec8c682f18346128af76e32cbfbf0e33e48829af, sha256-93b8fff1fc4125008ed2b2261dc89ed204205f0d6e4eafb03ec17d14fc7bb000, sha256-98077e98444407528f563892b9d42642277447e679d4dcfbc2d211909c52003e, sha256-9a51ee9409eb499fca1e112b4eb7dc2daf9f688370858725602e44a336d4b014, sha256-a488aed3aeae76e5253048205d6f4d8aed1d4df3ebb5376d8c1a4947634e9ef7, sha256-a74adf3ebdd9945b29f9c0f9c045c33f3888ae589868ce9fca26676d96061bfc, sha256-aba8af959ec6bb22ffef75283f1e0e85f91e719d31c64a0cd17b57f75b64a213, sha256-be48cc47cbfa6b7f117ee82aa9e03bc9579315bb5bd2a7f9f6f2151ac99f3e11, sha256-c1f4c72386a38feb633c0f7f130d17f0ec67310d0378ac580a13a66513bd2543, sha256-d6fd3e0e611add5f60d8b87c4d0af005518fdceec299c92956b5f9b76b248833, sha256-dc418436266232c8315e8df919cd0eaf7d6a98cc3a0806dee6cf214823dee29e, sha256-dd14fc055097d2d8390d43a51344c28b9b198efd86e5a659335b2fe24748fa9a, sha256-e1fe78080637cbf362623f67c6ed36f785e75eab008a068d08ae72d3773ccc92, sha256-ed8b8676d8eb8675e7b77898b5e8f6c79bdbcef10943eb7d3b6a79f725740dd9, sha256-eecffe8c3eab7df028cf696a2f006eab971af326625f513838fb17b98b0fbb29, sha256-f0c74d0e8dc17a8f02952a04579d195777e5ab93e6f9d231e76ae3543cf6a492, sha256-f3816c1ae669ec93b12b804161a735ad23120e4e15c1e61db3ad10efa1a6f2cd.

Evidence and timestamps

Field Observed value
Source revision 0b136a13a8bb612d91960ae5d07e72f449c89ec1
Build succeeded 2026-09-27T21:46:31.858157+00:00
Published unknown
Registry checked 2026-09-28T10:17:05.794914+00:00
Evidence verified
Compared with current declarations matched

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

amd64 OCI config and labels

Manifest: sha256:f3816c1ae669ec93b12b804161a735ad23120e4e15c1e61db3ad10efa1a6f2cd
Config: sha256:af4f724394b17cf300b3ae498aaec31ecfd8266972c27a6635896d26189f184d
Config created: 2026-09-27T19:57:58Z

LabelValue
io.buildah.version1.33.15
org.label-schema.build-date20260922
org.label-schema.licenseGPLv2
org.label-schema.nameCentOS Stream 10 Base Image
org.label-schema.schema-version1.0
org.label-schema.vendorCentOS
org.opencontainers.image.base.digestsha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b
org.opencontainers.image.base.namequay.io/centos/centos:stream10
org.opencontainers.image.created2026-09-27T19:57:58Z
org.opencontainers.image.descriptionCentOS Stream 10 distro-packaged Podman rootful compatibility image for CI
org.opencontainers.image.documentationhttps://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-10-rootful
org.opencontainers.image.licensesAGPL-3.0-only
org.opencontainers.image.revision0b136a13a8bb612d91960ae5d07e72f449c89ec1
org.opencontainers.image.sourcehttps://github.com/Strukturpiloten/containers
org.opencontainers.image.titleCentOS Stream 10 Podman rootful
org.opencontainers.image.urlhttps://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-10-rootful
org.opencontainers.image.vendorStrukturpiloten OHG
org.opencontainers.image.version1.0.0
arm64 OCI config and labels

Manifest: sha256:d6fd3e0e611add5f60d8b87c4d0af005518fdceec299c92956b5f9b76b248833
Config: sha256:afa9bfdc60cc5379a07ab8e0b7da81addc2e679edee3b387c7f603633561012e
Config created: 2026-09-27T19:57:58Z

LabelValue
io.buildah.version1.33.15
org.label-schema.build-date20260922
org.label-schema.licenseGPLv2
org.label-schema.nameCentOS Stream 10 Base Image
org.label-schema.schema-version1.0
org.label-schema.vendorCentOS
org.opencontainers.image.base.digestsha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b
org.opencontainers.image.base.namequay.io/centos/centos:stream10
org.opencontainers.image.created2026-09-27T19:57:58Z
org.opencontainers.image.descriptionCentOS Stream 10 distro-packaged Podman rootful compatibility image for CI
org.opencontainers.image.documentationhttps://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-10-rootful
org.opencontainers.image.licensesAGPL-3.0-only
org.opencontainers.image.revision0b136a13a8bb612d91960ae5d07e72f449c89ec1
org.opencontainers.image.sourcehttps://github.com/Strukturpiloten/containers
org.opencontainers.image.titleCentOS Stream 10 Podman rootful
org.opencontainers.image.urlhttps://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-10-rootful
org.opencontainers.image.vendorStrukturpiloten OHG
org.opencontainers.image.version1.0.0

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.

View source ↗ Read as Markdown Source updated