Debian 13 Podman rootful¶

Debian 13 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-debian-13-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: docker.io/library/debian:13@sha256:9cc080028c43b27d2074d63a5f9caf7166d731494965616c1a6d2827a004585c

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:16.018146+00:00.

Observed latest index digest: sha256:2761530a0b2c93d337cf54c237a0bfbad1d03142744e106553eb3bb602451b60.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-debian-13-rootful@sha256:2761530a0b2c93d337cf54c237a0bfbad1d03142744e106553eb3bb602451b60

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-debian-13-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32913970262-1-sha-880173ac9c97c768b3e5e64357a7b7a7c4f9bfe8, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-35436854454-1-sha-db5295447e925c9736b9aaed869a53d3a106a1ef, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-880173ac9c97c768b3e5e64357a7b7a7c4f9bfe8, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-db5295447e925c9736b9aaed869a53d3a106a1ef, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-0653351d655315b6ef693433dfdaaa9b6fa4aabcf65f95867f8786d27b6eaa0a, sha256-0736105ec719bec37f6141dab609367e1a56d77ecf2351ef569235804dd09b39, sha256-0aa5dc02dcdaadacde7af8cbd66952c7fbe2ac0218b2d1185f8ed9507b028534, sha256-19e20b15c341c199b523f54f2d10948f4b5816e4a82ae052a752c59624383663, sha256-22a3a20e68cdc430f51f26e882cdf6b1cb7d410d71f72f4f662e43e253114751, sha256-2761530a0b2c93d337cf54c237a0bfbad1d03142744e106553eb3bb602451b60, sha256-44dec48207814364ab783c975a564e4c4f9bf773c783e98f71d9ffb23913bf88, sha256-46ea498104d44614f1478062be56f5ab9b5999b055d4224bc54bcac26c111d4b, sha256-523cbb88af0d639f3ec3c4884698bf530cf9ebef2ff9757b9955d62fbe8ecc00, sha256-5f029cc5307303a162c12e028b4d709d5d363223178beff2128028eb1c7b91a7, sha256-707c752b682275b2cb0b2ede106a2154b1d629cbc9ae9391b28c9ecfa1b99a22, sha256-735cc59066d848a9a1800ee49143b2014bd4b3fcefc4911f7b3ab6c329d7121b, sha256-7aa4aa90b78b016f75cd2b5d2b3ffd0a8dca60102669487b4ac0d7da2649a183, sha256-86d35d7298af4d1a9e2e2c288fb6846f690922c2de3d5425212e0d9f03c0da49, sha256-9ebe7b4ebb5df2f9f2f9a3528c8f476866d382f9431b3d591f77eff1f7d643b8, sha256-a8fbe3d8ceaab609f4a4079e67a69e4d22b3547729a81b44ceb46457128e5b50, sha256-a98f43978f898297ba707a480ba02e1a42e7a958b676ea3b4110764b3ff76208, sha256-b3bbe80956eeeefb4814593f4ed442ba12ed6240bc1206f3502cf00ef6b14bd6, sha256-b5ce286dfe74eaa5579855d46fde3f9085d4cea7e2f5d0ae98ba3b1dc26b14e0, sha256-be651584c33b7815161f354276241fce338b64cbfbb0deef742662859a6b8911, sha256-bfaf525806dc31f37271908449c68437ee3dccc492f3e9b79517050b8d3c8d46, sha256-c126ace13467a8e2bbddb45f192e774912eeeb55f4b03737c526024f7e5cd89f, sha256-c44d4f5640f134137ea92e35ba251a4d40c2fc51dd3ea75d6d88cd2128f3f7e0, sha256-c5a29a84fe7bac1829cf485103ebf6dd7f4e3f446dcd8ab9c4b002169e6d26dd, sha256-d44584240d79f2150aac9ed2abc9a072c0406d78efb4b715d60dd5389733ee57, sha256-d53748c19e296f4be749f3637788eb5fb40fb18101c5e78a1ce47b22229cb1a1, sha256-dad6280ce91dae2f0e2c676c2578bf1d26e3fd2282fbe46f6e246d4159cf62d7, sha256-db6c6cc15af2edc5b9b9a6013b3f49e7c231cbc2b19c0bd7aab54f6ea95dea00, sha256-de1ea5db1c69ab8edb0c25ee1f76c392ab79ebfc3735129ae43c200996ee07fa, sha256-ef30e048d21d83c42a97537bce2a925cb7dad752372a168bdf2ec614a72d413d, sha256-f276b3f4583afa3e7665c81c3aa68c5ef0607c85090eb41d1ca2d64d5f05c383, sha256-f5271b51d58c31e7f0d0c622befea81655f6f893f3983872fb7b2b299ace4b41, sha256-fbae4d2d75b39cf80f17ab24b5d16fc9c9a76d8cf55f2263cb70fad6f7256dde.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.