CentOS Stream 10 Podman rootless¶
CentOS Stream 10 distro-packaged Podman rootless compatibility image for CI
Image: ghcr.io/strukturpiloten/podman-centos-stream-10-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless
Declared runtime base: quay.io/centos/centos:stream10@sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b
Image source and metadata · GHCR package · Detailed guide
Choose and inspect¶
The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.
Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.
Registry status: observed; checked at 2026-09-28T10:17:06.193463+00:00.
Observed latest index digest: sha256:f53bc76c700a2d5b22f41ed6a6ebd1350dd2aca72e6e390c3357414a19fead83.
Pull the observed immutable artifact:
podman pull ghcr.io/strukturpiloten/podman-centos-stream-10-rootless@sha256:f53bc76c700a2d5b22f41ed6a6ebd1350dd2aca72e6e390c3357414a19fead83
A CLI check can run without a nested workload:
podman run --rm ghcr.io/strukturpiloten/podman-centos-stream-10-rootless:v1.0.0 podman --version
Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.
Support and runtime contract¶
Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.
Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.
Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.
Declared runtime test contract:
{
"podman": {
"mode": "rootless",
"outerPrivilege": "privileged"
}
}
Registry aliases and history¶
Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.
Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33709307098-1-sha-663bb59a3ebb4ef928d9ecfde7bb1dd6618c0e77, run-34326686307-1-sha-9edf9ca0c4d67599e8c1bcd15a97c5fb98978548, run-35885114406-1-sha-932dd7c6310a5c89498cb4d5fc389070d39897ed, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-663bb59a3ebb4ef928d9ecfde7bb1dd6618c0e77, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-932dd7c6310a5c89498cb4d5fc389070d39897ed, sha-9edf9ca0c4d67599e8c1bcd15a97c5fb98978548, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-0dae796798c18b2dbe7d133f6675d181deb2e26efac05c6dff20bfce777795d1, sha256-0ea17e47f856b75bde41628334d2ebaa16dc869777f866dd8b5ada9ef2788185, sha256-14e6cd370f3b5211439f1466f67dee79e75727528392dadee2dda3d963e7fd4c, sha256-2f793a1acd3c2967c06c798aaed7a92434e768978aa3df6a64fcf22d05a42b9c, sha256-3cb594dc2d2e73787d365ca7b2018e7a3820742771a94e8b066556b72e41ee09, sha256-3e53e5f6aaaf09f7e864411693972106bd08da16582721ad8945846d6766a5bb, sha256-3f27e15c85cbfec3449b154cbed0127d8741a87bb23681118c22900b64355f98, sha256-43c16372b88baae41ac48d1b9d3cc0ca7632cd27b59e197dcdabde3e3516052b, sha256-44da3d2139a0f76a1a59e6e8f8653be735635701f32a5b0abd73524709239ab4, sha256-5737f9f38c372aec001996fe91ad2424375a75c1bb86d6a1e4b61639e05efc8e, sha256-58174ce3acbfd33c7777e021195e0a104a35655fbd594d4dd291e6107c8117fb, sha256-593fe00eefc3cfc0ed58fc2d040ee6428aa096cd05c59578ac9faded792c7526, sha256-62e7e435a8eee46a5c6b0d6d405a9937f680826caf2c1b5f06a47ba981c05002, sha256-658a2c10c29dadbdae1bc5f11dcea5685a4f6708242a891373c3b76fdbbf59fb, sha256-683208fcb2b369637d2152ba7c42d7f566317140ef86abc252688b4389d9fac6, sha256-71035dad3389a63d440ba55258572db03c2a8dd9b11dfca5565d2656f254a2ca, sha256-7569dd505512a348a18893aee1367df99a02763b9f4dd014f362e813158bec6e, sha256-7cd287d25c02784e5989bfae56cf838ebcc8bbbf60fdb6e4945ee61cdf720cb2, sha256-7ef619cd7863ffe38f48259043d8c19018aebdc8f8fbbaab9956370f4df51eb1, sha256-8cb0eac49588cc5002ac6a2d59e69d47dedccb39ee71b80a8e4605574245a1d3, sha256-9778915bdd74f3fae72651493ddbf6c177c419f91f435fefe6bf43907b14ee15, sha256-9d2923012affc2ca77b8319c1efe01c792153cc5fb2800ca7e568c5b677f56de, sha256-a31674cd8ccef240d2ef99977bbc3dd3ceda391d3349e389f551f79a92513989, sha256-a5bc16572235322f5bb403789ab55968b1a38b30b6a5585f7f01a5ff93117ead, sha256-a95f4030e90728e2952e3913e6b11b177c5a5fa4577d8ed320e536141fc2791d, sha256-ac04e9ac5b30dc1d76502846fa4b80abb3893124faa3d21c7d5b41217f897b6b, sha256-b3cc3d317d7024601f34740ec15acbcfb8b4fd8bd3738a931c7b8ceb339390bf, sha256-cfe0a3163a4e49bc5e69a082844aa14bd7bf232748d2a245c65ab80f1ba997e7, sha256-d6a8079b6fd160257c76789b0180520ff77025eb3e75e7bb556a0bd8b1361357, sha256-d99fe0472981299f1e0099349686ae3edcecdc5bf88989add9f9d84e72838b7e, sha256-d9e82453b864865ee5865b5ac74ed80b5412a0e92183eb3169d7398e2e50a0c0, sha256-dcf6593c2ec45131bb247f6b84893a7dad05bf7dc263e2b1a951d91163c9e5c4, sha256-de6ace60bb3ac72d018ce6144a62ad3605ef0b34de8bee827d62d8f8cf1fe0a0, sha256-e2f7e178741b75fa52148ed80b5ca0cc82025442c8437afb484ea29b6c0cabca, sha256-ecb64d6b53301e84c71572b17ec67f711cfc198c1899f183808ca85812fb4a24, sha256-f53bc76c700a2d5b22f41ed6a6ebd1350dd2aca72e6e390c3357414a19fead83.
Evidence and timestamps¶
| Field | Observed value |
|---|---|
| Source revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| Build succeeded | 2026-09-27T21:46:33.640748+00:00 |
| Published | unknown |
| Registry checked | 2026-09-28T10:17:06.193463+00:00 |
| Evidence | verified |
| Compared with current declarations | matched |
Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.
Maintenance release · Evidence asset
amd64 OCI config and labels
Manifest: sha256:0dae796798c18b2dbe7d133f6675d181deb2e26efac05c6dff20bfce777795d1
Config: sha256:0ab10b856f3662af1f7da9b900c27e42a273a7ff7addaaf5ae4a0fb278f68818
Config created: 2026-09-27T19:57:58Z
| Label | Value |
|---|---|
| io.buildah.version | 1.33.15 |
| org.label-schema.build-date | 20260922 |
| org.label-schema.license | GPLv2 |
| org.label-schema.name | CentOS Stream 10 Base Image |
| org.label-schema.schema-version | 1.0 |
| org.label-schema.vendor | CentOS |
| org.opencontainers.image.base.digest | sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b |
| org.opencontainers.image.base.name | quay.io/centos/centos:stream10 |
| org.opencontainers.image.created | 2026-09-27T19:57:58Z |
| org.opencontainers.image.description | CentOS Stream 10 distro-packaged Podman rootless compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-10-rootless |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | CentOS Stream 10 Podman rootless |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-10-rootless |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
arm64 OCI config and labels
Manifest: sha256:7ef619cd7863ffe38f48259043d8c19018aebdc8f8fbbaab9956370f4df51eb1
Config: sha256:f6003cd20032b913947b63179cb0a696d0da93f6c00d5a400cbb80546cc40865
Config created: 2026-09-27T19:57:58Z
| Label | Value |
|---|---|
| io.buildah.version | 1.33.15 |
| org.label-schema.build-date | 20260922 |
| org.label-schema.license | GPLv2 |
| org.label-schema.name | CentOS Stream 10 Base Image |
| org.label-schema.schema-version | 1.0 |
| org.label-schema.vendor | CentOS |
| org.opencontainers.image.base.digest | sha256:fd6b1e14d330489aac4624aeb6269428163b6fd557cfb572fd1098c73109e84b |
| org.opencontainers.image.base.name | quay.io/centos/centos:stream10 |
| org.opencontainers.image.created | 2026-09-27T19:57:58Z |
| org.opencontainers.image.description | CentOS Stream 10 distro-packaged Podman rootless compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-10-rootless |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | CentOS Stream 10 Podman rootless |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-10-rootless |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.