CentOS Stream 9 Podman rootless¶
CentOS Stream 9 distro-packaged Podman rootless compatibility image for CI
Image: ghcr.io/strukturpiloten/podman-centos-stream-9-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless
Declared runtime base: quay.io/centos/centos:stream9@sha256:0996d37c69b3a8c33042932d415ad7bf5a8122270264e835e5c0153615aef0e4
Image source and metadata · GHCR package · Detailed guide
Choose and inspect¶
The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.
Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.
Registry status: observed; checked at 2026-09-28T10:17:06.337456+00:00.
Observed latest index digest: sha256:04d65097e1e1d9b834b9e5ff8f51887541dcf0ffe6a3fe42e7c367ece6552eaa.
Pull the observed immutable artifact:
podman pull ghcr.io/strukturpiloten/podman-centos-stream-9-rootless@sha256:04d65097e1e1d9b834b9e5ff8f51887541dcf0ffe6a3fe42e7c367ece6552eaa
A CLI check can run without a nested workload:
podman run --rm ghcr.io/strukturpiloten/podman-centos-stream-9-rootless:v1.0.0 podman --version
Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.
Support and runtime contract¶
Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.
Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.
Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.
Declared runtime test contract:
{
"podman": {
"mode": "rootless",
"outerPrivilege": "privileged"
}
}
Registry aliases and history¶
Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.
Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33762422486-1-sha-2f39d6c5ab4d71c9d7f2e93cfce660c67e16254e, run-34673485176-1-sha-25dcd61b23de420f528868c920ab0af33947ad8a, run-34995576111-1-sha-a80dd4024d7957e770605bfc1b1cf2441442517b, run-35803884762-1-sha-c7e4aa055ebf08988df147b8b5e58dc8af4c973d, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-25dcd61b23de420f528868c920ab0af33947ad8a, sha-2f39d6c5ab4d71c9d7f2e93cfce660c67e16254e, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a80dd4024d7957e770605bfc1b1cf2441442517b, sha-c7e4aa055ebf08988df147b8b5e58dc8af4c973d, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-04d65097e1e1d9b834b9e5ff8f51887541dcf0ffe6a3fe42e7c367ece6552eaa, sha256-0568ce1b272d2ccf3b2044e0de3001a056aaaefc39d29e2fd38855b9c99bc558, sha256-07b69ad7ad817ce9eed1e45232d58656cc14ef5f61efaebe6dfbbd798e06867f, sha256-0c60ed499d87d137b1637190de8b181ec9a1174c1448456e6aacb98c7fb07f8e, sha256-2477aaf10fe1cf35de382a367e79c5298fb8b29e7499a243e6432c07e6859426, sha256-28adcdeb937075ca78e31510405ef4cd407b1a2bab282f4fe2427dfa22bc6f3b, sha256-3519e6d16df9a0f06d27b8326c670d8d16a64014d6e1656a76edbc1fdae39ae0, sha256-44740b644e9f30a199979ff2a705dcc6dc2ae4709ea29970275d328015d814bd, sha256-462d53b0327a5be40a3a9d4d5e58f4b79e1cee08bef2131555ff2eba023f5420, sha256-4aac56810f491814603eede235aed2c795c930f2d36920011c5201b43262f9a6, sha256-552a77ec93dfdee5badfe2719acbaf84f0d24e6ec197912182940ffde95594ff, sha256-5647e3359aa81265bf178a8dfead4a8ba818359f42a51fc503a90707fc1c80ee, sha256-67025e7654ae25d16519eaef3638084fa9b055b4d6cc6d85c186de39ec618257, sha256-6a4a3acb1976004e27f225f5c42e652ae6f948c2bd72ca0f664785efbf1035c0, sha256-6a531e626491f93bf7bd46010596f085a27b253bf0ea8991ec187ed710deda10, sha256-6b4be957821ae182fc3a8c3f392694a44b3b0955810753f185fa2b642adeaa98, sha256-6bbb0f345a7eb423d2788f11240cb33b27d85bae8c8682f52b850ba2618ddcd2, sha256-6c4020c76b0f6cb387be6bd7e75addbe5e3c3121ebf16e4976d509e36f2f092f, sha256-6ca4b300f4d5a378ff30651c3fe996efbaa49e87f7164223672d1b40bd9605e0, sha256-779595ffed6177a6626ab5ca2ff7e75e8f5f67e5707d34b68df86a782b0ad4ad, sha256-82088ecb73d73a949e9bd8a9ed0270dc0ec6f792bb90c2f34afa1d09e82bcd56, sha256-8dbb4f98b4bfe8e8057fe936a0799da24c7bdff5bc034cc53f564ec15a4ed457, sha256-961078fb766a9c9613b6eaf51797abd2c998d5b4f97c8fbdc702f3a718c1378e, sha256-a7ed5c7495fda55a479e2dba9712811f0d60bd074ebaa925e4fce8dc087a26da, sha256-c0bc9b9cd82eb17bb38c0994751f5728fb59cbf0a265da1cf78225794e70f79d, sha256-c76a12136c5bc2d82a3e3bd8d48a6f14bad5f7929e774cd9ce7c9a35edfb3093, sha256-c9fb3003acf71e9df6456cc3bcb924a6c12903dd618c39135233dc9fb0b76556, sha256-d00470b762c30a9972be25d7d4f670333557a6b4a5072b3dc60632d045f14409, sha256-d421d8f5d4c2967cbf7295b0b5d43456be43b67da7a763436a678eb8fef4a9e1, sha256-d46a87eac8c751973ab8602e3562473828e587a285e55fd3a77a23197d6f74e6, sha256-d6f681e3c0e2a454aad1b1cab6086603f2bd8f53d6c2a3c34d5c6824f1d0645d, sha256-dbe69b0420d9b3d645e33cb79d65dc20a0593944a811762526aea96db3a4af0c, sha256-de0d949313f3bef1c58b552ebbd52c5ca79a0ea8c8de4428b90fd0001066bb45, sha256-de7656f081ca45f6c85ceb89083a056d679ff8a299f7ac8ea30621794ee00195, sha256-e6fb9b5ee182d9388f86ff38ad2a008e4f5e3fd7d8ac4c316eefee7bdf5513ac, sha256-e9d2de7a4440d0f99691f31e439247cc49b2b5797a02936eca2f27379817cd78, sha256-ea1475b50035577a95f5912dfcb596bc336acda918884f2cd828ae402704dfb2, sha256-f407474db50141e4b1beb4a97cacb9d3d06181391176ca77a5828db744b2069e, sha256-f98c48e0f8947021e696133e31d0af38eadbc7662a58be947cbfea14a3f4155b.
Evidence and timestamps¶
| Field | Observed value |
|---|---|
| Source revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| Build succeeded | 2026-09-27T21:51:16.071265+00:00 |
| Published | unknown |
| Registry checked | 2026-09-28T10:17:06.337456+00:00 |
| Evidence | verified |
| Compared with current declarations | matched |
Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.
Maintenance release · Evidence asset
amd64 OCI config and labels
Manifest: sha256:c76a12136c5bc2d82a3e3bd8d48a6f14bad5f7929e774cd9ce7c9a35edfb3093
Config: sha256:bf405deecc7d5e70701e9903ed5fe28276feabb75fd7e6a615116925dca17a46
Config created: 2026-09-27T19:57:58Z
| Label | Value |
|---|---|
| io.buildah.version | 1.33.15 |
| org.label-schema.build-date | 20260922 |
| org.label-schema.license | GPLv2 |
| org.label-schema.name | CentOS Stream 9 Base Image |
| org.label-schema.schema-version | 1.0 |
| org.label-schema.vendor | CentOS |
| org.opencontainers.image.base.digest | sha256:0996d37c69b3a8c33042932d415ad7bf5a8122270264e835e5c0153615aef0e4 |
| org.opencontainers.image.base.name | quay.io/centos/centos:stream9 |
| org.opencontainers.image.created | 2026-09-27T19:57:58Z |
| org.opencontainers.image.description | CentOS Stream 9 distro-packaged Podman rootless compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-9-rootless |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | CentOS Stream 9 Podman rootless |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-9-rootless |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
arm64 OCI config and labels
Manifest: sha256:dbe69b0420d9b3d645e33cb79d65dc20a0593944a811762526aea96db3a4af0c
Config: sha256:4959477b90456f18c74d3aedc6eb34642f698a06c561a0721ddb319d9b3024a6
Config created: 2026-09-27T19:57:58Z
| Label | Value |
|---|---|
| io.buildah.version | 1.33.15 |
| org.label-schema.build-date | 20260922 |
| org.label-schema.license | GPLv2 |
| org.label-schema.name | CentOS Stream 9 Base Image |
| org.label-schema.schema-version | 1.0 |
| org.label-schema.vendor | CentOS |
| org.opencontainers.image.base.digest | sha256:0996d37c69b3a8c33042932d415ad7bf5a8122270264e835e5c0153615aef0e4 |
| org.opencontainers.image.base.name | quay.io/centos/centos:stream9 |
| org.opencontainers.image.created | 2026-09-27T19:57:58Z |
| org.opencontainers.image.description | CentOS Stream 9 distro-packaged Podman rootless compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/0b136a13a8bb612d91960ae5d07e72f449c89ec1/images/podman/podman-centos-stream-9-rootless |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | 0b136a13a8bb612d91960ae5d07e72f449c89ec1 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | CentOS Stream 9 Podman rootless |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-centos-stream-9-rootless |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.