Red Hat UBI 8 Podman rootful¶
Red Hat UBI 8 distro-packaged Podman rootful compatibility image for CI
Image: ghcr.io/strukturpiloten/podman-ubi-8-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful
Declared runtime base: registry.access.redhat.com/ubi8/ubi:latest@sha256:61528281e9ef10e9e34e88d63a8e2d4e1755d130a6fb1e0e931bd062ad476a6c
Image source and metadata · GHCR package · Detailed guide
Choose and inspect¶
The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.
Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.
Registry status: observed; checked at 2026-09-28T10:17:32.409859+00:00.
Observed latest index digest: sha256:43a9a89da5537d4922db212f1137f88d120270d078369d97ef94561879bd537f.
Pull the observed immutable artifact:
podman pull ghcr.io/strukturpiloten/podman-ubi-8-rootful@sha256:43a9a89da5537d4922db212f1137f88d120270d078369d97ef94561879bd537f
A CLI check can run without a nested workload:
podman run --rm ghcr.io/strukturpiloten/podman-ubi-8-rootful:v1.0.0 podman --version
Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.
Support and runtime contract¶
Lifecycle: legacy; admission: isolated-test; review after: 2026-12-31.
Historical distribution compatibility fixture; vendor security support and installed engine fixes require separate review.
Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.
Declared runtime test contract:
{
"podman": {
"mode": "rootful",
"outerPrivilege": "privileged"
}
}
Registry aliases and history¶
Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.
Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33266499519-1-sha-367bd00e16d7ef768ec3fbcd4e7e378c8993efe6, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-33926541069-1-sha-11e90ec57054dd2ce120c9d5ce2cfc6912a66709, run-34270136392-1-sha-6275b856f635195eb22237505144dd4cd80ac486, run-34662222982-1-sha-d7082e30c6fac9d7ea2d38359e5acc25af68d455, run-34834375893-1-sha-6f80f3debf2103053282d2a05227d6280556b19c, run-36256567793-1-sha-eaca9839d392ec1d8fbb5e392c5838cb0b4edf05, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, run-36398916816-1-sha-c19dedb3c596fddff81ecce56e023c80b24e7119, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-11e90ec57054dd2ce120c9d5ce2cfc6912a66709, sha-367bd00e16d7ef768ec3fbcd4e7e378c8993efe6, sha-6275b856f635195eb22237505144dd4cd80ac486, sha-6f80f3debf2103053282d2a05227d6280556b19c, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-c19dedb3c596fddff81ecce56e023c80b24e7119, sha-d7082e30c6fac9d7ea2d38359e5acc25af68d455, sha-eaca9839d392ec1d8fbb5e392c5838cb0b4edf05, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-02a3ef94276c67ea4ec214352c2d5cdd07289e08605f9a4b15f433c89f6a3fde, sha256-081146ad69440f38fe66c810f0aec50c816b110b6f16a06bbdd96296b1b958d0, sha256-094d7ddda77b803a09dd2f5a55ae511e049d1152c7a80dcd8204c9efa78cc56e, sha256-0e0800f3603c7cf0d5b0a4635bbd7d672dcdc7916e76067562281a570ef1aa53, sha256-236ae579f103a191296db8467f708b1cacf56defd67d4947279f66cb4ca694e2, sha256-239a9cb26cce7ab763a2ebdff41e989c51afad7a69ccb03dc0fe24029c5917a9, sha256-28731c6e4da9941296735c17cdadb3738ed2619a0c7fb56723f919e4d8d962dc, sha256-28abfefb05529d3ac697aa85099472735aa5dcc70eb9eca564272baa762d4e0a, sha256-313571b5ae5c19c35f7e8afe92cb91315d74e92c3e98fa6357c61cba0352530b, sha256-35203e8e21735797db8beffe47db3ad1f997d3721f571ecd8efdaa982674ca17, sha256-409ab1b4f4a82a61feb2d2b48c7127e6bec9ccc0369f574c6ca3ab46f20abb1a, sha256-43a9a89da5537d4922db212f1137f88d120270d078369d97ef94561879bd537f, sha256-46369cec5ca681a7eb17992eea87a595771cb97e6914351d5340dcc3a42721c8, sha256-46bdce1c9f7d93181cd405ae6dc582a0106bc6ec5b36db8ee5cb51ed45a5dc34, sha256-49891b081ad0a85ee167b6ce1b769645feb8e9cb6a33eed8957a5c87accaf951, sha256-4c7a739dd28bc71969e6f2d96c41917bdde6a10d2d30e85573c3336c3fbb3d4d, sha256-51dc92fd2165112131a3f070021f7fe382f3fcd541a4f39f7e01fdb8326483fc, sha256-5402fc79704a5e9bd570ec2581384af2d21b3571bc22d8e9939116c9ba8eefcd, sha256-58005507f3d173e4fbd92fecf572e7e99d5a443b6a8619b681e8e4aaa6446348, sha256-5b7dfa12ad44b0b4eedcf3a7d7b6b59f75a3aa206098538505fd877a2de8148c, sha256-60e14c0887fe074fa6d4df1ea4bfea753152213f13847ed8146ecb452860f5a5, sha256-61061413c7de1738925258960997adbd275513d5817e4e8b5ebbe8d2a822d2c3, sha256-6243220116b98e47b3798f8d51ffff1aaba40894cf6c59612090a2926f006fc2, sha256-6464cb987dc7b612a4eda20dc40755f3aca61f518eb30322bfe84cce3fd88741, sha256-6af1f0d92eee0b19844e23300f86cfc98b9d4ba3c6ee7e5a85da26a2d23ffbac, sha256-72076674ccc3cab0c9c0e5ce496c66b19d129aba5590175d8d20a7ed7a16fe32, sha256-8122d972288be66b17c46b266d7dda9e54a1d1f96e3d16ccb06d49a0bc087ccf, sha256-82200243f55f18ea14b55a241cebcd8c00a4d294d7570b26f4ef5fc924627bbf, sha256-9ed6e400ec2073f11288da650ca287112317f6524c8e8e3f5d9f4d2a2d86c330, sha256-a205962704e4e3648fa70bee5063f33b29f55447098e824c1b01ce2ec61dc42f, sha256-a6bdf9ef2cd6f0c4dc353396e65ce4b1629e23ab5fee1a941b39e93b2ea5570c, sha256-a99c2d4105c3f0d47de959ec0983f18a3b89db196d35fb2ef89ce163e244d1a7, sha256-b124fa8dcd7930a86451c9f99c7e83f85c8b9e5164daaded9975c10829d38b04, sha256-b40135d2a61f44a7eb0b67f0312f46dd32da5860f43889412ed68f7c385c297d, sha256-b937b92b88c75dc469d0a5851f2cb9175e94fc6ca12e3d1d7b52c64d93a16ed6, sha256-bbeb9376d06b93294e4accaca727b15063f76e7913b6f4753869c10b83cbaf2b, sha256-be083c14324d725462b0da0c276e9369740fe29848b491bf7c174220589342da, sha256-bf522ceeb7e60b7ac16f2d5716443c3e4d7c9545da41bf5d32e4e9fd9460cfe1, sha256-c58f18e1403211ec69de7e9d0c6020a2f65f31735a6bc97fd9077f7e85187ab7, sha256-c5d3f62ba3171497406b168da1a73459bdab6986a0e23ebbbd79dd5344924890, sha256-df24b6309f1aaabd2a3a5f08a5b2c9f882fa15b16830bb64df511c52a3921f6e, sha256-e2e0c2a058963ce8737de7ab7c37098807cce7492896cae6d30c4c55c233db1d, sha256-e50031432c68a73132ed56511c2bfc2846b2dfc3e2bbde548bceaba4ec15686e, sha256-e6743546689ce30ecc078a2c4e9d2fb3e886c3555b726d7322fdd79e86928455, sha256-e74086540ac9c35c72600662e62202919b90d332e6e20580b481eb17926aa0b5, sha256-ee068a66246c0b059b57790501a445f31471de70a27eeff32a8ba269c5756dfa, sha256-f629f5d828456e531aac05b492006ce0e63efaac85d67ff8338afba423157b4d, sha256-f898555bf95af588f2cf1a9a8456ac1ff6533da2c46431df373d139c617177e9.
Evidence and timestamps¶
| Field | Observed value |
|---|---|
| Source revision | c19dedb3c596fddff81ecce56e023c80b24e7119 |
| Build succeeded | 2026-09-28T08:47:56.884535+00:00 |
| Published | unknown |
| Registry checked | 2026-09-28T10:17:32.409859+00:00 |
| Evidence | verified |
| Compared with current declarations | matched |
Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.
Maintenance release · Evidence asset
amd64 OCI config and labels
Manifest: sha256:e6743546689ce30ecc078a2c4e9d2fb3e886c3555b726d7322fdd79e86928455
Config: sha256:73a493b1f3fbf200b5e76ae0807b7ed4a622c068b6a09d93b55b9996d18dc6e9
Config created: 2026-09-28T08:41:55Z
| Label | Value |
|---|---|
| architecture | x86_64 |
| build-date | 2026-09-28T00:50:23Z |
| com.redhat.component | ubi8-container |
| com.redhat.license_terms | https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI |
| cpe | cpe:/a:redhat:enterprise_linux:8::appstream |
| description | The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly. |
| distribution-scope | public |
| io.buildah.version | 1.44.0 |
| io.k8s.description | The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly. |
| io.k8s.display-name | Red Hat Universal Base Image 8 |
| io.openshift.expose-services | |
| io.openshift.tags | base rhel8 |
| maintainer | Red Hat, Inc. |
| name | ubi8/ubi |
| org.opencontainers.image.base.digest | sha256:61528281e9ef10e9e34e88d63a8e2d4e1755d130a6fb1e0e931bd062ad476a6c |
| org.opencontainers.image.base.name | registry.access.redhat.com/ubi8/ubi:latest |
| org.opencontainers.image.created | 2026-09-28T08:41:55Z |
| org.opencontainers.image.description | Red Hat UBI 8 distro-packaged Podman rootful compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/c19dedb3c596fddff81ecce56e023c80b24e7119/images/podman/podman-ubi-8-rootful |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | c19dedb3c596fddff81ecce56e023c80b24e7119 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | Red Hat UBI 8 Podman rootful |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-ubi-8-rootful |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
| release | 1790556530 |
| summary | Provides the latest release of Red Hat Universal Base Image 8. |
| url | https://catalog.redhat.com/en/search?searchType=containers |
| vcs-ref | 18ee73021a6ca24d4707a8eb91f313bf97ad972d |
| vcs-type | git |
| vendor | Red Hat, Inc. |
| version | 8.10 |
arm64 OCI config and labels
Manifest: sha256:72076674ccc3cab0c9c0e5ce496c66b19d129aba5590175d8d20a7ed7a16fe32
Config: sha256:57b90417b00630f14b18eea79bf09ff3552788607c744b2529d46f7516a18947
Config created: 2026-09-28T08:41:55Z
| Label | Value |
|---|---|
| architecture | aarch64 |
| build-date | 2026-09-28T00:51:41Z |
| com.redhat.component | ubi8-container |
| com.redhat.license_terms | https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI |
| cpe | cpe:/a:redhat:enterprise_linux:8::appstream |
| description | The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly. |
| distribution-scope | public |
| io.buildah.version | 1.44.0 |
| io.k8s.description | The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly. |
| io.k8s.display-name | Red Hat Universal Base Image 8 |
| io.openshift.expose-services | |
| io.openshift.tags | base rhel8 |
| maintainer | Red Hat, Inc. |
| name | ubi8/ubi |
| org.opencontainers.image.base.digest | sha256:61528281e9ef10e9e34e88d63a8e2d4e1755d130a6fb1e0e931bd062ad476a6c |
| org.opencontainers.image.base.name | registry.access.redhat.com/ubi8/ubi:latest |
| org.opencontainers.image.created | 2026-09-28T08:41:55Z |
| org.opencontainers.image.description | Red Hat UBI 8 distro-packaged Podman rootful compatibility image for CI |
| org.opencontainers.image.documentation | https://github.com/Strukturpiloten/containers/tree/c19dedb3c596fddff81ecce56e023c80b24e7119/images/podman/podman-ubi-8-rootful |
| org.opencontainers.image.licenses | AGPL-3.0-only |
| org.opencontainers.image.revision | c19dedb3c596fddff81ecce56e023c80b24e7119 |
| org.opencontainers.image.source | https://github.com/Strukturpiloten/containers |
| org.opencontainers.image.title | Red Hat UBI 8 Podman rootful |
| org.opencontainers.image.url | https://github.com/Strukturpiloten/containers/pkgs/container/podman-ubi-8-rootful |
| org.opencontainers.image.vendor | Strukturpiloten OHG |
| org.opencontainers.image.version | 1.0.0 |
| release | 1790556530 |
| summary | Provides the latest release of Red Hat Universal Base Image 8. |
| url | https://catalog.redhat.com/en/search?searchType=containers |
| vcs-ref | 18ee73021a6ca24d4707a8eb91f313bf97ad972d |
| vcs-type | git |
| vendor | Red Hat, Inc. |
| version | 8.10 |
GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.