Debian 11 Podman rootless¶

Debian 11 distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-debian-11-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: docker.io/library/debian:11@sha256:6f519a81440354a85eb592c5f32109ab80605f6b892455983a6f618bf87fabe9

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:10.104785+00:00.

Observed latest index digest: sha256:dc23b132bf07576ffa95cb7f6f3b84018a6d47f802a90736db8366f2826397fb.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-debian-11-rootless@sha256:dc23b132bf07576ffa95cb7f6f3b84018a6d47f802a90736db8366f2826397fb

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-debian-11-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: legacy; admission: isolated-test; review after: 2026-12-31.

Historical distribution compatibility fixture; vendor security support and installed engine fixes require separate review.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32891713489-1-sha-727331740848a6a0bcdbe4f08d8fff2f04b336f4, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33304142817-2-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-727331740848a6a0bcdbe4f08d8fff2f04b336f4, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-007fdf8309c64ec8b6213e3239426815bfbe21215aee4fb9a2062a0786dc0c97, sha256-01d5a0cb02fb4be3aa54d0a0415fcc21f62633aa795313f163e9540e32f861ed, sha256-020d075bd456fbd2de124d833daa959ec68910f127965649db519ff1772dfcf1, sha256-060a227fd10feaa621b72e96dda23611721f0a98e5c47184c8d8b3cf06bac916, sha256-0fd1b4065ea5da77911d841bd27f7af2294ff478646fbfd1764bda6b21125c67, sha256-198e130a09023da73dd4a91f919da3e6f903b09b457a4fce23d1f909c7b16f91, sha256-1f15d38e6fefefcdd61a9759a998e402af759c9e79c110e70995da8bec0af3d7, sha256-2b4dafb1292072f83663a574be397111ce4b3d399ce03402ec58fb5d05c33185, sha256-2b9dcbaa3f11e451e3c13f665aaf33ef0ee18a7fef464455b51d0780e42c9d00, sha256-2e1ba218e2852b06c1b7d088c9b9ce3d31d160790367f1aaa026b15355e407e6, sha256-2f986ba159c0e93ea8034e76a7b508b70411799082a8cb9e63be4ed80428f855, sha256-3039c50bd25c7edf101b01022005fdda44064062bcc6f64baf025076977b031f, sha256-51b5e749e75cbd93192bc7ed19fe94153a6ff39efc76f9c95dfab082fe34035a, sha256-59904be84cbf96b8b7106521faf452f9e839c6a9ac9dbe3a1698d896f1568d9c, sha256-60a654cdab998746a3cccdf1d35540cbc7008aca71433c43468461a475d8f0ad, sha256-62009c701354a0b6f2ed00710b69d446615ab8e3272f930fb6b63264fb91904a, sha256-6f1e1868293aebecc73f2858de7ecea894d56a7fa3d6548a1c859a67a66050eb, sha256-799283903ba63f50e2d2269362ed48a2f85fef763fd70f9beb38f5c616caabb8, sha256-7eed82033b648ef3034d68df2b82b1fe8745c8c3e3d9c599184b29b1aed3685f, sha256-86cb69bc44354d7055e58748b97702b17c81ad7575d3fdad7e24837843f9589d, sha256-8a2eead4fa30899b299e9f0569d7ba796d3dc64f6de3bdb6ebb272e12e072968, sha256-b968c1a325e5c075a5a1ea3970343fe7800af2efd244f0ba049ce3f970324f86, sha256-c0e3f0a1f7b5716cb22d1891185e0f3c89dbc980beec443bf204f5a72c490c8d, sha256-cd01fe434b5f5d0b6dea45f3a997f039135f5247c46413fbd8b28bb55bdd124c, sha256-d6eb6fa37d9a2488876f4cf9635640ca6e7d886234203364a4752d77934c9b34, sha256-d9938160850a23a5f571967c79fa88df9d563dadbc4caaacd30c012782e88f54, sha256-dc23b132bf07576ffa95cb7f6f3b84018a6d47f802a90736db8366f2826397fb, sha256-f36373a378229a1212d16e8f4e6f9794c265a2f44573a8a46c22bb78a43543e8, sha256-f7e9a077e1af64c21b96576833c14e23e6e6c3ea71edeeaddcb18b97ae263e7b, sha256-fab1e182eb59d9ccb637046f8199456018f4f2f0c1c6e4db947bb869ca25edc4.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.