CentOS Stream 9 Podman rootful

CentOS Stream 9 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-centos-stream-9-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: quay.io/centos/centos:stream9@sha256:0996d37c69b3a8c33042932d415ad7bf5a8122270264e835e5c0153615aef0e4

Image source and metadata · GHCR package · Detailed guide

Choose and inspect

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:06.309199+00:00.

Observed latest index digest: sha256:ce933b870a13f800774962107dcad8477bb692c046f873bdf0d3d40872a5f1f3.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-centos-stream-9-rootful@sha256:ce933b870a13f800774962107dcad8477bb692c046f873bdf0d3d40872a5f1f3

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-centos-stream-9-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33762422486-1-sha-2f39d6c5ab4d71c9d7f2e93cfce660c67e16254e, run-34673485176-1-sha-25dcd61b23de420f528868c920ab0af33947ad8a, run-34995576111-1-sha-a80dd4024d7957e770605bfc1b1cf2441442517b, run-35803884762-1-sha-c7e4aa055ebf08988df147b8b5e58dc8af4c973d, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-25dcd61b23de420f528868c920ab0af33947ad8a, sha-2f39d6c5ab4d71c9d7f2e93cfce660c67e16254e, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a80dd4024d7957e770605bfc1b1cf2441442517b, sha-c7e4aa055ebf08988df147b8b5e58dc8af4c973d, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-0120d11dd1117adec520ca95ad0e56ec95ce8c40b1df2bd7cb6b708da5e186cf, sha256-0bee1ff16eb23fa30eb509d0a5dd8fd2b144ffb3637513209b34b624a52d2599, sha256-156cff4fd74d630a621f48734be8b13767463a0c519e5b453b9fcc7fa03c8f61, sha256-1968b302c57f4fcedf278cf18418e7e43baa147b5a17875b4083f34bfccde140, sha256-19d7030b93973756e72b5334f580fbec4885e84b05535c086f7efe760a6e09b9, sha256-21b41526c9036cfdbc2135014e0103b0d1dc072658513295da770ac4cc275559, sha256-236075a044f55c67ee85dba25c5a566440c8a1b69272e49935299c4049ad1bb6, sha256-27dc8b588a36074dce704f786b5fbc1f1b99b22131037d7a8c754f2e23d08694, sha256-2e2f5d6dae56f7950c1d738e2b0290e8ade10c3ced29bc5e6f19cf605298afa3, sha256-44b47f00036239a558ad9890cac8b272fa228149771d0fab71d4d1d005928280, sha256-46de1d8604fab785ef32e14c3cc4ec163d0f85392277d2a8454ebc505a7694c7, sha256-492e3f092c76b9d605b8f6cab4b57d242c0a97c7dd06489e1d5b7be11fe1e678, sha256-506d90c4c17e79029fdfffc45598cf2cd1f974de76552987f55649a85bba2390, sha256-680e81f132e25f966dad0b6c19e5b90067c6d9a6bc76467bb3f9442a4bc89a3f, sha256-7c47f7677c9b7ad701c2bad83586d9c82232df40d9ad24ae84715cf672cdb10e, sha256-7cc1a93adf51080687c83376e62c7613e06d833e956c7ebb7a964791987070f5, sha256-7e85a4ccd8ffed2d46049c7dde7d415c4dc23dae95952e70c2c98253aa4a03f1, sha256-7ebf6cc19c5314bd2ccc98abaf9b3ddfa250640ace4d19203d203135439aa4f5, sha256-7f3bec6578fed530133581cb92ae88f39d36acfc6a160c5fb535b10471630a26, sha256-8b02674b2d03d66706cc32befd4c1abb29ea6b89f62aa7b590499fd231f90813, sha256-8d25400e7f0454352905c994c0d385446b5a04b769796b6919f043bc2171f194, sha256-94452a2d1f931e2c5eec0cc27418db134d3ca655ed0400f085a51d5fb57f72cc, sha256-954d8d0fd6b87b67b5a647428513af87ae9878a279d40bbc7a6eceda7db7d8f0, sha256-99374971d683abbb4f9af33c73029b80885b6adb2a1690264b18eb977ff854d8, sha256-a9dcba99916ff0f881958e0602ba77325d37e9e4bd020863cb792a81dd00372d, sha256-abbf8b1bfd2ebce3b7f773135be2602c6811c49442583012e440d8597dc455bf, sha256-add88b633a6ba5011b8edafc616222c11bff732be0b7e723288de84ca8283e67, sha256-bd31db4a74f2a66d81249e2153fd63a73db0457e909066ebcb192a1797b5cda3, sha256-c2a23a2f8aa885416914369d1dbb67c81a01e403514c5827b027d30e5d64dccf, sha256-c780f2360351c7b0c3250cc8efbb5fb0cb1907c9e6ebecd20ca25db2a6a4d43e, sha256-cc20a43fd3ef40a2d07ac99937114640ffbea4e9d674980d7aebc230d971b680, sha256-ce933b870a13f800774962107dcad8477bb692c046f873bdf0d3d40872a5f1f3, sha256-d5b82a7ecc778d6b17223972355d8946d48ff566f323c84775e38e1860194e76, sha256-e504189efc12294dd0cd11ec1fafeea599598f65148238e7bcad80ffa917eed3, sha256-e98f376b4817a532b3550ef1e779a63b4d02f455b57c09a325d2ed130a5a6efc, sha256-efd99a2a6b88a8993000a7a99636e73ae413a96f95d654e8e9d00959899add3f, sha256-f0b9e7ed0da3135c14f31e66e278e2f41f95eb9b4982c1fde47b8118b5ad97d9, sha256-f76f4951fd279d062d446a118f2702dd51d7ec04d3049c5542e3cfcd2ae9b0e3, sha256-fab2170ce1f517f3708f3c8dd259578fdbd0e3478f9a703562800bbbd25df690.

Evidence and timestamps

Field Observed value
Source revision 0b136a13a8bb612d91960ae5d07e72f449c89ec1
Build succeeded 2026-09-27T21:48:40.403270+00:00
Published unknown
Registry checked 2026-09-28T10:17:06.309199+00:00
Evidence verified
Compared with current declarations matched

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

amd64 OCI config and labels

Manifest: sha256:add88b633a6ba5011b8edafc616222c11bff732be0b7e723288de84ca8283e67
Config: sha256:7f7ee65b886d335a647e0133d65936499e92a76b7bb25cc08fc89d8d853315b2
Config created: 2026-09-27T19:57:58Z

LabelValue
io.buildah.version1.33.15
org.label-schema.build-date20260922
org.label-schema.licenseGPLv2
org.label-schema.nameCentOS Stream 9 Base Image
org.label-schema.schema-version1.0
org.label-schema.vendorCentOS
org.opencontainers.image.base.digestsha256:0996d37c69b3a8c33042932d415ad7bf5a8122270264e835e5c0153615aef0e4
org.opencontainers.image.base.namequay.io/centos/centos:stream9
org.opencontainers.image.created2026-09-27T19:57:58Z
org.opencontainers.image.descriptionCentOS Stream 9 distro-packaged Podman rootful compatibility image for CI
org.opencontainers.image.documentationhttps://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-9-rootful
org.opencontainers.image.licensesAGPL-3.0-only
org.opencontainers.image.revision0b136a13a8bb612d91960ae5d07e72f449c89ec1
org.opencontainers.image.sourcehttps://github.com/Strukturpiloten/containers
org.opencontainers.image.titleCentOS Stream 9 Podman rootful
org.opencontainers.image.urlhttps://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-9-rootful
org.opencontainers.image.vendorStrukturpiloten OHG
org.opencontainers.image.version1.0.0
arm64 OCI config and labels

Manifest: sha256:99374971d683abbb4f9af33c73029b80885b6adb2a1690264b18eb977ff854d8
Config: sha256:b002be6f9338cc4ea63a15bf77fd23aad56ed25c24b283b1fc4bb20f18a6cb16
Config created: 2026-09-27T19:57:58Z

LabelValue
io.buildah.version1.33.15
org.label-schema.build-date20260922
org.label-schema.licenseGPLv2
org.label-schema.nameCentOS Stream 9 Base Image
org.label-schema.schema-version1.0
org.label-schema.vendorCentOS
org.opencontainers.image.base.digestsha256:0996d37c69b3a8c33042932d415ad7bf5a8122270264e835e5c0153615aef0e4
org.opencontainers.image.base.namequay.io/centos/centos:stream9
org.opencontainers.image.created2026-09-27T19:57:58Z
org.opencontainers.image.descriptionCentOS Stream 9 distro-packaged Podman rootful compatibility image for CI
org.opencontainers.image.documentationhttps://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-9-rootful
org.opencontainers.image.licensesAGPL-3.0-only
org.opencontainers.image.revision0b136a13a8bb612d91960ae5d07e72f449c89ec1
org.opencontainers.image.sourcehttps://github.com/Strukturpiloten/containers
org.opencontainers.image.titleCentOS Stream 9 Podman rootful
org.opencontainers.image.urlhttps://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-9-rootful
org.opencontainers.image.vendorStrukturpiloten OHG
org.opencontainers.image.version1.0.0

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.

View source ↗ Read as Markdown Source updated