Debian 12 Podman rootless¶

Debian 12 distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-debian-12-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: docker.io/library/debian:12@sha256:f37a335e82bca302e955fa39f9dfe28f1be618f016f8a2b56318e5a5111afc26

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:15.870158+00:00.

Observed latest index digest: sha256:7a2fde06a1dab64abea132d60014e12b87b736ba441d174b0d1e9bb253ba5b6a.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-debian-12-rootless@sha256:7a2fde06a1dab64abea132d60014e12b87b736ba441d174b0d1e9bb253ba5b6a

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-debian-12-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33034060210-1-sha-61be8863cafe552a0d4568508767116517a034aa, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-35423428841-1-sha-a4b8693d12f94f5ad831da60cd739d92b9b762f0, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-61be8863cafe552a0d4568508767116517a034aa, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a4b8693d12f94f5ad831da60cd739d92b9b762f0, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-0a358f7fd06564d9391941c850a771778ac0f7cd1d73fbba672572ade366eff1, sha256-0fcd7b6b33edd4b0e40ddddaf6be122960b3fa175bd3c6baff1300ee50ec2329, sha256-11ed7b550cb98f1a9cb6f4eab36b99d670fd56479479d1818444314ca2fb5500, sha256-1a8c869f32d73c3f076a5b721bbbbd86d049abb24d57e160c1ee632e7d1be3a7, sha256-1ddc8ee0df91a52e812d431669ae2dd22d82a55946cfe20d1d1104f60ac56de4, sha256-21ad19049802d855941bc9182bad3a166a56c0a7ee7963c79cb6fa0df5821229, sha256-248ba8e56c84b1a6cc1ed5de1b52cdcd1aad6432e268d2b8763a35bc2be83a2b, sha256-2bb0309f8adabc9aec1292ef02c8784b69a69448c51fb9b3eaa942fda4ea9413, sha256-42a322d1f263c6fa6faf85092fbe77401d61752b8d11c7cae36bf8b3df2de240, sha256-434dad125f073324b1495b384061e878b8a02ce0a964cd7085b0aa7f3dacd69e, sha256-4519fcdc18d5948cc5a3d94d7e6a9022230268a3e5fac54b64d02be9569e65f4, sha256-4a06ad7bde37727758f23dae9a9a30e420ba45f6af3ad7ab06ebbcaa3ea3f2c0, sha256-5a13baa130a6c8c5f86d213652411eff4266917676aa458cecc8daf725c2abe5, sha256-5fafa46ae9b36828e3befd16f2ba6c49b3469799d156d304299be586febaeee3, sha256-61429385400e1051d610ce0b73e2525ff779fea6d05b2ef07e3be0afe04e50f4, sha256-67319a9353778caee7b9ba6b38927d582db96babc67387d5b34c04718ddc33a7, sha256-696da39c5baa5f260232527cdcc41a31252fef2b57e4934778cf49c8581188d9, sha256-6d116954475b5c7206b3aa5c7ad603c0ba1c9d4741af2c81c3ff6950b9041430, sha256-7a2fde06a1dab64abea132d60014e12b87b736ba441d174b0d1e9bb253ba5b6a, sha256-8a5a902607619a8b982acd5e921cb139828ba63626120ec57a34ec825d7aef65, sha256-926e6a727a93e097ff3c108a50e18ce46adcc3139109a3c30a6f6a45193a49d6, sha256-95db8980e344a5c495a974d5cb2977897e77d257b8eec52dae55ce8f6c240f21, sha256-b01dd61ae22baa0dd7f001810a2e272ae234c7ef282b792fd0f04e5d9706a0ea, sha256-bdae375d7610ed5d173ba80f2ca8643b087bfd789824f21caf6e1d07005338ca, sha256-bf51cc959de98ee43c2d1069148da14dc3d6602cfa573a87b8affb426bcbf161, sha256-cdb7b048282048788b6f6078294cc0866b471800cd36b03e981c0555ad458a32, sha256-ce2b0d50143fd6833eff9361fd717d8e29429e39825f663bd9a75c7aa8345bf9, sha256-d1c68213c9def7ef123f4ac75b68b9660f6ee78f69fd8f4482798ff18622614e, sha256-deb65829f6dd47e542fc628164fc845444994c43a789e565db106356ceecf702, sha256-e65fe329cc095034a9cda63badaf7f10b449af2244ac976047969f02919bd7a8, sha256-f26223c7fe16e16d1a1e501b4cae8e22404c4868e227e4ebb4ba974880c2b8c4, sha256-fb35ad943f906cdd9f36c1cfabe613718eaf212252db244ee9ffc1462f2263af, sha256-fb74389dbd54960a87349ca379f6804eb0f3609e1b6c6f4db8520e9f234762b7.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.