Ubuntu 22.04 Podman rootless¶

Ubuntu 22.04 distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-ubuntu-22.04-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: docker.io/library/ubuntu:22.04@sha256:b8b6ee6aa931ecd9d0d952abc34dc0e5f7c6a30c6bb71b079fe399fde0329c02

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:38.699855+00:00.

Observed latest index digest: sha256:9e21e8a9582e814236a6387b44cb7f7be6dfd0da748af51d699ca55fb533395c.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-ubuntu-22.04-rootless@sha256:9e21e8a9582e814236a6387b44cb7f7be6dfd0da748af51d699ca55fb533395c

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-ubuntu-22.04-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-34428920235-1-sha-51df9c73ca57b5772553c3a4a11631b1374b0c08, run-35416723997-1-sha-3cabd0bf0105b73292010bdebac31a44b2a8a72e, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-3cabd0bf0105b73292010bdebac31a44b2a8a72e, sha-51df9c73ca57b5772553c3a4a11631b1374b0c08, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-004e37d146083d1d74734561aed3b93295c73fb07eecdb308f62a2da1c3979ab, sha256-008e82df5e5a5c00d814cab8f7fae62f1f4e5158d422fb0ec5d5c4c9a8d40b4e, sha256-05f0b639625aa4f060b20676aefd63ec3a6ec185ba9de62b16e9f17b5d310f64, sha256-06bb67e3febf0e509c59cc0ae8787598ee4f362163972052d79f8f0a657e5161, sha256-0fc55a39b99f52878da33819511a3af28cad1953551e1b5644b6f64d517f798e, sha256-1865b81e0c2b75695bc8e8bd54ddb17225a910b4a805602ae453a02828ea5b53, sha256-2c78aef2e5bbf67a7f8dead30bb51ab07587bdacc9a240393ce4d1ee02740081, sha256-33ca04f6c9ea5bf405fe5d973cf6fd88ba0e2c6a4f6318dc4321393cca2e667b, sha256-36cab767a884ae8b7fdafa39af357998c689fb61442fec419405d9871bfbd4cc, sha256-3d0ca5776b6103949d63ce20be927383b1b6decae71ae873b7d8325aae69bcdd, sha256-3e8f0bb515a2b3869ed1b335a8da4c0a69d2db0ef0d955a9657ce7f76069ab1b, sha256-3f95680bac9a4ea36d5d791d1296b44e0f99f5adb848ecb7b097e49cef49cdd4, sha256-465cb42d80408c4dbb9a1c9ab23b22175d7ebf5e799c4bbc3a51f2abfd1afd51, sha256-46dccf6389964f7162e6b1c090f9d0b9dc82da7fa7287053a235934b351a8738, sha256-60accb4c46e13834733753e5e3b659ce47d85896391debe3124e3951ef393488, sha256-67c027b238d2edf58bfb021644ca0f0dafac898bc0bf3452f8d5d4974838d4b9, sha256-6e013b79b5bdcee849fd552ea250a9aecd4cd0e4c5e938d74ee4c83a249e3169, sha256-6f94ed53caa1f151dc0218b1725fb50f344b21f0ae38d32256c4a9d54a65b53d, sha256-6fa5f7950deb8f376a813e61944dc8ab385063c281c62cb915b9cafb819173ac, sha256-715aefdbf6949420fb3d14c1d4740f2668eb0d5238cd70e76465d6cc6e629d3f, sha256-742d8ab502e90964c2aed647c83f8ff6a9ba6ab60dd3a627cc32de17ad94c093, sha256-76941116c9ae57fee39fe219686354a223bbfce3fb9dac1f93c90ed27c2bfad4, sha256-7780702fb7f597009216980b3e5f416044bede17f7fb4c7af8fa5e4f55916084, sha256-7b14fd02488e117aaab6a70591471c961e2d138453007389209fb02f89fc7f09, sha256-7d335b69f685c7d2818a8ab32e0bd4f4f2bf07e04d1872ce5f29a9bcd43ce726, sha256-8b1babd15a6897746325dc800a8c65e2a495c98b9a6fa88d0b6df445e7d7fd36, sha256-9e21e8a9582e814236a6387b44cb7f7be6dfd0da748af51d699ca55fb533395c, sha256-a51de1eed45eb9f43746b3b017b92bc825e02cd3b51e477b00866bb7a7293ed7, sha256-c913bd219a8da8b624bf97b6720a4260ec7fe07425d6a93b650f6153fda793db, sha256-d68c4226810566eff7e1fdbac1ba74ec785fb5261dd328ae4c955f43c8504340, sha256-eedd847d2dbda8c58df624ce6b596e2d773203aa331b66f001576ab555561bf9, sha256-f5f85b1ffcc2c572e77bd73ca3ef0e802d9ac83c6235bd67f056b8b9d4131b23, sha256-fc552993409773344069e083cfde2a8f72ce96bb5ead24f7baef30ff3e6f0f8e.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.