openSUSE Leap 16.0 Podman rootful¶

openSUSE Leap 16.0 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-opensuse-leap-16.0-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: registry.opensuse.org/opensuse/leap:16.0@sha256:5bc9e1242fc2c92dbbcaf4db5e2eadad062c4c0434550c53822201f18799d55a

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:25.792600+00:00.

Observed latest index digest: sha256:81c5a834ecc84f727aad3cd9c0b72e8881701225a73ce99afd14613a37feaf1a.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-opensuse-leap-16.0-rootful@sha256:81c5a834ecc84f727aad3cd9c0b72e8881701225a73ce99afd14613a37feaf1a

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-opensuse-leap-16.0-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-36214393191-1-sha-50d0c13d249c7c8bf69d4c0fdfbbe9575151ab1c, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-50d0c13d249c7c8bf69d4c0fdfbbe9575151ab1c, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-00d5c972e2c352798b05a6675d6a6f279aa7e8ce1b8455dd2dc3819cd1900c7e, sha256-1716c710cbd35ee897d315087ba5b5bc56c205751f350eaf9ab4a61cd4a89648, sha256-1b1659da09c098a727257db54e469b8ce80fbc08d0b0c7eb6f5ec1578d4391be, sha256-254ece899d0f6d871878ec99bc5f83bec469946d7a2286f3bcdc8e2e885e188e, sha256-387760b245debf9724e55d2066760970ea67be54fa73db3d5fe2b49c9e554847, sha256-3abe8a596a33283a8d92102374c2fa700c90a40dbacde115ec762644996513e4, sha256-4049ee60e99ebb40b3b17374ba14a6f7363e46a7a1c3c0dac2f565309be41fa3, sha256-40fbbaa944b981dc3255d319545c4b0513e34e33a7ddb36501814f65fbe993e8, sha256-46a90da23169e13b6ae40da620e875ebad9e72524209a8dde2c8805cdf0b05c6, sha256-47312035e4c28fb602ab458587eb5e7d079dd121813179926e11bfc843ce5ddb, sha256-47d2a452be7976dcec70eb55650f215573d2a1aa8ccb2e837744c7b9d3ac1e37, sha256-49859520e569d74092648e3f7e5147d558aca52c83794615ce47afe250adb094, sha256-508275cd3bcb724d71421176dbeec8b1d08605424bddc77c7b1e3fa8069b3ad0, sha256-530e294798bcffdbe6b8196c45de2cfc2bf8b97f87c8666f58747cabe74a4cd9, sha256-58ef1bb2aa8d1ce41be52126e23aa01633f5341b61f7ff2bcdbeb2d1823c469e, sha256-6519a7cf6fd0183bd4cd0961cc4bfe546f56d1d731962dc2b384038a84461915, sha256-7c5ae539623453a8eb7da63f8fa495a0fd360cf5008b3605afb62a6601b71ca7, sha256-81c5a834ecc84f727aad3cd9c0b72e8881701225a73ce99afd14613a37feaf1a, sha256-861be9703323ce2196c9fe9f9aa532c6d86ccaa202503ad0dfb7ecab104f344c, sha256-89c05d78d5a5926e6e507f62870a8c524e8e171004273df57a0409e8a420e778, sha256-95e06bc3f93725eee225cb1c1e7980688f743760504df84b1804d03a182d5deb, sha256-a822fb73b303548708ee65a627600eac98fd46a4d58dc5f5b3e1b5228aaa2acd, sha256-b04b1036bbc0e1d7157c76fc9cd849df8fb5df8415eede61d58184332fa944c4, sha256-b7b03d6485f46b01dbef7756db560bd3ed1e81e9cfd647b4418c360bccee0da4, sha256-c1523d1c30a3e1c0866c73c2c28666bf0bf0ad5c69ec12dab2b1a77f8f5e1296, sha256-c660e6614b3898695ddc6bc3cc82e403225b6f37cac95b3171f8523dd3066585, sha256-cd05521281cad898cbb09dca639e42230ae2fa5c7cb25cda1082eaea67cb31bc, sha256-e75b0575bc6e1c42169294ad8713080871059c8a0f730b5dc0a0ab65ca2d81e2, sha256-e8990c16e46f15ce22f5e2dc8163910b847831a357d36e9986816d22c187e062, sha256-fb2a0218c810c24176bd3cac86b84165a6bb2d55a5dbccc42bc63213a81273cf.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.