CentOS Stream 10 Podman rootful¶
CentOS Stream 10 distro-packaged Podman rootful compatibility image for CI
Image: ghcr.io/strukturpiloten/podman-centos-stream-10-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful
Declared runtime base: quay.io/centos/centos:stream10@sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b
Image source and metadata · GHCR package · Detailed guide
Choose and inspect¶
The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.
Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.
Registry status: observed; checked at 2026-09-28T10:17:05.794914+00:00.
Observed latest index digest: sha256:2dd5ca4e077fbe5a3643ff171f42c45cba9b19eb20f8c250f1496833ac103b67.
Pull the observed immutable artifact:
podman pull ghcr.io/strukturpiloten/podman-centos-stream-10-rootful@sha256:2dd5ca4e077fbe5a3643ff171f42c45cba9b19eb20f8c250f1496833ac103b67
A CLI check can run without a nested workload:
podman run --rm ghcr.io/strukturpiloten/podman-centos-stream-10-rootful:v1.0.0 podman --version
Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.
Support and runtime contract¶
Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.
Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.
Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.
Declared runtime test contract:
{
"podman": {
"mode": "rootful",
"outerPrivilege": "privileged"
}
}
Registry aliases and history¶
Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.
Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33709307098-1-sha-663bb59a3ebb4ef928d9ecfde7bb1dd6618c0e77, run-34326686307-1-sha-9edf9ca0c4d67599e8c1bcd15a97c5fb98978548, run-35885114406-1-sha-932dd7c6310a5c89498cb4d5fc389070d39897ed, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-663bb59a3ebb4ef928d9ecfde7bb1dd6618c0e77, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-932dd7c6310a5c89498cb4d5fc389070d39897ed, sha-9edf9ca0c4d67599e8c1bcd15a97c5fb98978548, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-00ad1f09f8b20404855d1a0eda528441994495546d354027181b07d276027221, sha256-066c5d0baef85c64ebac7f497f80f5570348321c346dd9d5786e57a7f139c90f, sha256-08939dd0e492ae0a4eb2b77260e0472c070f20b36a0114ba6fe74592a9684c6c, sha256-11184659c2583259d452d5528ab72a16bbccf71909d2d5cea48573a05227192c, sha256-143aaa7409464d9e180d7b207e499889ff372f71c62f4025498e775990304e43, sha256-1ec44b9964d2adcc5f12b3714ec1e1dcf154892b9e3dfe36031102f74a00dfdb, sha256-20993434833b093957f15c227832327b6d3964a07065763e740f1e432d5957f7, sha256-26eedc63e7069d4bcc92f81e5851e090a839e731c32cb2d44e38f96c55be1f27, sha256-2a9b133e191054f7dbc18ac12f6bdc104e2288df9e7e8ae7dd45515040d60075, sha256-2dd5ca4e077fbe5a3643ff171f42c45cba9b19eb20f8c250f1496833ac103b67, sha256-3dc1ac25fdf4a2628961c45693099146c97da42b242dd8a1b74b177feb1e1d07, sha256-3e09191394e3c3c226eda6c30526e2c711e16aa35e622bfbfe4fff319243c18a, sha256-5a70e080eca8a5ba7837d5ac36681bf1fa528ac0deb3f1ec3689927a21327354, sha256-5d1223eb8fb7ab7ca1f9bf4994303644757b94110db7eff0bf2fb2d718a83de4, sha256-60b40f3a6d3eeda752b9084c1f4993855bc085b92f267f7bc2b80c6213b94ffe, sha256-6573ee6824872435e90e82b348b70be4e666662f9d93a6af6acbad059a0f3102, sha256-66737cd8f6cb4ca5ebc822a393f5168d596266de013258454db06528b4ca2a2e, sha256-75da949e69666f46bdf92ff7f7310367584db2b2d127feb8bede2397262aca2f, sha256-80eb622f44fac9b4f6088bcde86ce5de844843a7902125d4dbbceac34fcbfdc3, sha256-87a5f2e623386a2f89f1bfabec8c682f18346128af76e32cbfbf0e33e48829af, sha256-93b8fff1fc4125008ed2b2261dc89ed204205f0d6e4eafb03ec17d14fc7bb000, sha256-98077e98444407528f563892b9d42642277447e679d4dcfbc2d211909c52003e, sha256-9a51ee9409eb499fca1e112b4eb7dc2daf9f688370858725602e44a336d4b014, sha256-a488aed3aeae76e5253048205d6f4d8aed1d4df3ebb5376d8c1a4947634e9ef7, sha256-a74adf3ebdd9945b29f9c0f9c045c33f3888ae589868ce9fca26676d96061bfc, sha256-aba8af959ec6bb22ffef75283f1e0e85f91e719d31c64a0cd17b57f75b64a213, sha256-be48cc47cbfa6b7f117ee82aa9e03bc9579315bb5bd2a7f9f6f2151ac99f3e11, sha256-c1f4c72386a38feb633c0f7f130d17f0ec67310d0378ac580a13a66513bd2543, sha256-d6fd3e0e611add5f60d8b87c4d0af005518fdceec299c92956b5f9b76b248833, sha256-dc418436266232c8315e8df919cd0eaf7d6a98cc3a0806dee6cf214823dee29e, sha256-dd14fc055097d2d8390d43a51344c28b9b198efd86e5a659335b2fe24748fa9a, sha256-e1fe78080637cbf362623f67c6ed36f785e75eab008a068d08ae72d3773ccc92, sha256-ed8b8676d8eb8675e7b77898b5e8f6c79bdbcef10943eb7d3b6a79f725740dd9, sha256-eecffe8c3eab7df028cf696a2f006eab971af326625f513838fb17b98b0fbb29, sha256-f0c74d0e8dc17a8f02952a04579d195777e5ab93e6f9d231e76ae3543cf6a492, sha256-f3816c1ae669ec93b12b804161a735ad23120e4e15c1e61db3ad10efa1a6f2cd.
Evidence and timestamps¶
| Field | Observed value |
|---|---|
| Source revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| Build succeeded | 2026-09-27T21:46:31.858157+00:00 |
| Published | unknown |
| Registry checked | 2026-09-28T10:17:05.794914+00:00 |
| Evidence | verified |
| Compared with current declarations | matched |
Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.
Maintenance release · Evidence asset
amd64 OCI config and labels
Manifest: sha256:f3816c1ae669ec93b12b804161a735ad23120e4e15c1e61db3ad10efa1a6f2cd
Config: sha256:af4f724394b17cf300b3ae498aaec31ecfd8266972c27a6635896d26189f184d
Config created: 2026-09-27T19:57:58Z
| Label | Value |
|---|---|
| io.buildah.version | 1.33.15 |
| org.label-schema.build-date | 20260922 |
| org.label-schema.license | GPLv2 |
| org.label-schema.name | CentOS Stream 10 Base Image |
| org.label-schema.schema-version | 1.0 |
| org.label-schema.vendor | CentOS |
| org.opencontainers.image.base.digest | sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b |
| org.opencontainers.image.base.name | quay.io/centos/centos:stream10 |
| org.opencontainers.image.created | 2026-09-27T19:57:58Z |
| org.opencontainers.image.description | CentOS Stream 10 distro-packaged Podman rootful compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-10-rootful |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | CentOS Stream 10 Podman rootful |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-10-rootful |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
arm64 OCI config and labels
Manifest: sha256:d6fd3e0e611add5f60d8b87c4d0af005518fdceec299c92956b5f9b76b248833
Config: sha256:afa9bfdc60cc5379a07ab8e0b7da81addc2e679edee3b387c7f603633561012e
Config created: 2026-09-27T19:57:58Z
| Label | Value |
|---|---|
| io.buildah.version | 1.33.15 |
| org.label-schema.build-date | 20260922 |
| org.label-schema.license | GPLv2 |
| org.label-schema.name | CentOS Stream 10 Base Image |
| org.label-schema.schema-version | 1.0 |
| org.label-schema.vendor | CentOS |
| org.opencontainers.image.base.digest | sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b |
| org.opencontainers.image.base.name | quay.io/centos/centos:stream10 |
| org.opencontainers.image.created | 2026-09-27T19:57:58Z |
| org.opencontainers.image.description | CentOS Stream 10 distro-packaged Podman rootful compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-10-rootful |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | CentOS Stream 10 Podman rootful |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-10-rootful |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.