Debian 11 Podman rootful¶

Debian 11 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-debian-11-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: docker.io/library/debian:11@sha256:6f519a81440354a85eb592c5f32109ab80605f6b892455983a6f618bf87fabe9

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:07.745205+00:00.

Observed latest index digest: sha256:154bfde8b980f76274a3312006f0d68523914115ce5fea22d5c44d31d92f1bd2.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-debian-11-rootful@sha256:154bfde8b980f76274a3312006f0d68523914115ce5fea22d5c44d31d92f1bd2

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-debian-11-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: legacy; admission: isolated-test; review after: 2026-12-31.

Historical distribution compatibility fixture; vendor security support and installed engine fixes require separate review.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32891713489-1-sha-727331740848a6a0bcdbe4f08d8fff2f04b336f4, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-727331740848a6a0bcdbe4f08d8fff2f04b336f4, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-021043691ce6046731720b4eb322bfd80e1a63295852d79756ac23e73875ad63, sha256-02136eff6e76d93b2eaa59510e3f4c5fd4a6e9c1e3d847fd4bab4492ccbf012e, sha256-0229f280ceb83da31a80f5536a354d9225197666718d597166eb929d92484f64, sha256-05d8d37488a8d0712ffe523454de241df9ec386d13462d5d0b338a97b7835ea9, sha256-0c48fd49c57b86339d64dbea0aaaf2245fbe67c0cb266c535a82ce47ab807438, sha256-10839dce951b322d7cd5f835a8959f9c3d821cfe9b972d5c9cdab2bb1269ecf4, sha256-154bfde8b980f76274a3312006f0d68523914115ce5fea22d5c44d31d92f1bd2, sha256-1628b1759dde3109db8ad08d565cb82c53dba0615edb7dfec4a403892c5e1882, sha256-1f771c45aa59471a708a56747ba7019ef546d7c4eed3d41f6a020921a928034a, sha256-2906620269deec4447137ac60f7e36046ac00a3db1795d8380cfe2cdbb4039e3, sha256-3443bfed08ef0a14a21bf248a481716e2d45e23351e122c3b8618e9bf5a46e28, sha256-36cff21b1262d57729c6045281e71b315ba3dbd19db5c5f03d52df1726394f4d, sha256-471dde636dc8977853f8e3b3d618ae1fdac419d218a3a5d513a006c9e6763d46, sha256-480e856c89ef8d9ae38ef591b3863220a3be695553638f00084b67c6cf613d1f, sha256-4e31dbabf071efda5925c332ea7d0e2b99231317cd8884ba2224b125f22894c5, sha256-4f5677be39881f43ce3c6de1a9a131da250282307289b96f86f000c4a4cf657f, sha256-4fd06150214720d4e310c7d8841282f96cd41a6bc755481d127a3cc7363e2e9c, sha256-58b3fc5263f290e012088464fe157977141395a9d97b187196b549eb631ab193, sha256-5afb00529a596d2b108a4d8302979edd9e94b15b96f49efbe0c818525c3907f8, sha256-7b78249b50fcf159896bb3278d2277184b1804c3973e6bb6498f221fa778e124, sha256-86be4240d359f6ab6af4417f3d6d6d60f13432534465530d37f987adc0b1d2c3, sha256-93955867b152e810b6d0029fadc48a561e62122cb8c52bdb289c2dd23461c624, sha256-9beb6d4f3b722be683c4a197284628a1cf56a94fc5620a3ed2776741d7d0a9d2, sha256-b0f870d241e5535cec4dcb7282dca40c2628ac66b0655139ad2006d07c148505, sha256-bad422ea65cdd32bc530a88bab964aef83ca9c826cac77c6b210b49a1eff99a5, sha256-c446faecf809fc93dbec6fd560e0319cff034dde2e7f344813617da08610d66b, sha256-c966856558ed64597828b798cff3e4e0eafe81f9d3efd2dfc70589bca7185eaa, sha256-cc83b00a240244db5e9b54d8c7ac482557bac39b43e963534f5222d14fff2990, sha256-eda01f5adb9016ffe82c46749195a957cddb9847f8e19aa60ee46bb81fb5ccaf, sha256-f5e6eee6e17497aa8bd14039aa31af20c36181fc03b21a83f7de9ac4fa48c0e7.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.