Ubuntu 22.04 Podman rootful¶

Ubuntu 22.04 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-ubuntu-22.04-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: docker.io/library/ubuntu:22.04@sha256:b8b6ee6aa931ecd9d0d952abc34dc0e5f7c6a30c6bb71b079fe399fde0329c02

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:35.493332+00:00.

Observed latest index digest: sha256:3728d2d2b63c1f4dacb1b1d5ade60ae00655b553fb07fb37a00c001f31ba6d16.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-ubuntu-22.04-rootful@sha256:3728d2d2b63c1f4dacb1b1d5ade60ae00655b553fb07fb37a00c001f31ba6d16

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-ubuntu-22.04-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-34428920235-1-sha-51df9c73ca57b5772553c3a4a11631b1374b0c08, run-35416723997-1-sha-3cabd0bf0105b73292010bdebac31a44b2a8a72e, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-3cabd0bf0105b73292010bdebac31a44b2a8a72e, sha-51df9c73ca57b5772553c3a4a11631b1374b0c08, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-039ece0f4abd6e8019b58adb6f4a6e2ff60fbd6739901daf5efc9f07eaf0b988, sha256-0c4da8a098f32d2a3c588a540900fa79f22a46cbf257111ef42b507934bbb5ca, sha256-0d0b124c5bf9ecfd1e238824d7ed82b9c1ce159bb69cd55588db74e78a26f4ee, sha256-25eb6762bd7b5aa2eb3e043ea851c00b3cce73cd9f21e44ff314531d14bd22e2, sha256-27ae698d41ea4e7532753ca6c258c5162fbd10cec22f546608d00addea794c49, sha256-293afff8808dd9145ae7430fa773219822e32a93597271fca3db9fe6ce7f7bb4, sha256-2efb29e8ea25a87a114cb6c2ece2a85cb1ef5d5f73790b834e60e3308a03df11, sha256-3494d7bb2f90248f847cd0aa64f73d2167b2b6c3e12080227333312af0029f61, sha256-3728d2d2b63c1f4dacb1b1d5ade60ae00655b553fb07fb37a00c001f31ba6d16, sha256-47bec5817b626d68f501fbdaaf879dccd230fd7f5de058c24813e0748fba65a9, sha256-4900041d107dcde7c9a14a851d2ff08a6ee74ce7a25126892170011f577b8804, sha256-4eda7a2859beedf6b0a384f148ec86b5cd5dc17f90a112a76c81efed96f90e2a, sha256-50a430ff7c8c16e68c3386faba7f67029fd2025a8cb4feaf393fb4769ed8edb1, sha256-536b16be8671f44e754fffcaedfd4252d400c8f567d78e391140664b029e2b86, sha256-68306e9ed516d65af5d5fc4a677841132d74b841bf12075082d8db006f425be3, sha256-696831e7f899d5bd4e06c5b17dfff5c0cf62212d4aca4ac4229a75e316072be3, sha256-734e40ad800e50ec719a6a4c9737c60324a9fe43e04ff216c7b1c7ac9ff64d1e, sha256-7ba0071350e7f2d838083d6af060f4d50b608724f24a44a92b6ce695c4d0ce56, sha256-8000ad641991e6ecf3d3f109fd3013b73d816e4aeb4185bb21e94607e50de78d, sha256-8c1de04c2fd6d8b95c6e8c3f37fc16e4f45c998d49ce259dcf4e3d73d3a2d7ec, sha256-8febcd8aec889c5ab12c74f9a863fdc5068ae2be3ed806ddaba288a3907fdda3, sha256-90cba9c26b2e8fc02e8d905b7c36fe897377b8f9280901d7b082fc5bb109562f, sha256-91f8ba383a5288c8c0c1aa72108b46904939ce7817f983ffbe6624d205a8dc89, sha256-9b9cb1b5ba045e9dad629cfcc61c93e14bf5e8e8587d3ab29299e1b2a5feef06, sha256-9dbac34a40fc6f1bbc6cec00145e85841470a9ed68069dca7727cec93418658a, sha256-a8f64ae01a4bdaf6747ed582204a851e710563be372a9877bbdac6509d58a5e9, sha256-ad12d4b893ec6b2855223e4ce4e4a9e0302c321c87896271b52bbaac4f6ad4b9, sha256-bc898bb205e743c367312e90538dac550607c61b32bd14621c46ab379332b60d, sha256-c499b07c910fc43214bba9cd3a32a9f7985eae76b95c36d7b0d6b2872d6a8e8a, sha256-d0d114a48df5e52ae3a639146e47d146ab521523853ba9709d45feed8bb83cd0, sha256-e0296ff01141d2a4b8ee70773bb8b03c531b9088d1410ae54057a4ed8c9ada8b, sha256-e37d606a05b02ce4f3a7541f90a42d99283540fc9ae22e6c935277889f6ac8d5, sha256-efd949a7eb38e1e4c4adeb633c7cf84134b53941ba0e139b7292390579f3d6d4.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.