Ubuntu 24.04 Podman rootful¶

Ubuntu 24.04 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-ubuntu-24.04-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: docker.io/library/ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:39.495786+00:00.

Observed latest index digest: sha256:03ee2c162b47f08f15a5f56a723b8f36418f5bdd3039e5f3bc3afa0f96af2ee9.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-ubuntu-24.04-rootful@sha256:03ee2c162b47f08f15a5f56a723b8f36418f5bdd3039e5f3bc3afa0f96af2ee9

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-ubuntu-24.04-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-34467907908-1-sha-a026ea524fc723fa43f68f0321975805979120ec, run-35100033634-1-sha-0fd1fabe5cd28ddbaf47241a233488503dbc84de, run-35456608437-1-sha-a16d02f379a02b0376fff921f04fdcce0667f105, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0fd1fabe5cd28ddbaf47241a233488503dbc84de, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a026ea524fc723fa43f68f0321975805979120ec, sha-a16d02f379a02b0376fff921f04fdcce0667f105, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-03ee2c162b47f08f15a5f56a723b8f36418f5bdd3039e5f3bc3afa0f96af2ee9, sha256-0f5a4c3d2af7c7e3a6ce0ebaf1dcbfd29e256c3a708e032f718f8cb7eaa02740, sha256-29acb0d430fbcf5041c3c96030282c80f99ff3bbbd344b4dee5692faa2906f37, sha256-35710b6ba2a54cf5c39c352dd8ca763c67fec0fd85f6ce107d2ea1e8bfb78be5, sha256-3af0f63e2935641216f1f51c718ca42db9ee384fa744d9258fa2d2463549aa27, sha256-4af09157f46fd35ecd41ba0aaebcbc0479a653bb231e97efff7cb3a13207c62b, sha256-4b5088f7fbc5c41498e80aa301cffeae12dc056a912ad8e07ad72abb7775c13c, sha256-4c0ff35d3e07d6bbcfeef758838f9f2cdc3056733c52a8528fef07ace42402e7, sha256-4f1581a16d3d8636c92dd83cbb6ab7bc797b0db4c1a80a260c52c0795f430f38, sha256-55af74df6bbd01a69d81700fee7a19bb68ea80e3dd583d8680610b078396dc65, sha256-567565af56f04a78f68e1d92bd8004a57db3eeeaeae81fe62aee0caa73b74745, sha256-5713ed937c934f5e7861f9e1e4cebf3956ce6e9541f11053f48fa6a4f9cf70c9, sha256-5b17efdc8487763fc3f0105817b0b5a94e7dab0bc25d434dc5ac70fa792baac7, sha256-5b65d94b64715ab50cb2da037446c0f4a688470560402883b987fc01ba1c4002, sha256-5e237d28bce07f5aee5eab485a1a54d8f38719eadbc8be63ce4f960a8a70b781, sha256-6b7408641334982db5b41ab9a4de539d884c5f3ef0c151bfcb59adfe8f72a8c0, sha256-6ed7684bca8e681d0e948c182cb2bfa801f1eed9e35092b1f28cd13310f96cad, sha256-71aa194c8e6fb862f9d0a24717dd736242967428b14d13f719a8a82ceb1ea826, sha256-7b3867c403e56d07a630f12772f6cfc20243f8cb34b8b826754d6b59ecf4f0ae, sha256-891861431358d8ad17b5f5570587180b8a9406fe50d0d644a3d80295019dfc73, sha256-910cd16e5b99e840468e93b2f7aee049a711d6e672da75459d3db39efb737e8a, sha256-987264815d61f657624601e0be66ba2f5869bb19dd36ade5809a01f2a7635f17, sha256-a4cd35a47ff959e3bc875fd80cc6641d9cd8c36741e1eb4b7c1c79a5ec6604c0, sha256-b3812d8194c4f4682afecea00818cfedd237b50c687b10537678b5bbbb75720c, sha256-b95858ff3c31343ffaf11d9b9bc3ea5c15b6f995f535edd1f285c1a35c6d1f76, sha256-bb51077aa6db08b18814f254a76e9288887744d7a8acab43061d2999c7363937, sha256-bd6b63b1c3cc1c537f0d7c03f4c11f5aae253c9f54f16bd01ec8a01065c1d7dd, sha256-beadbce98383aa67c975569f7769ba7e618a7e69ec3e7c45b94cee1f585dcec9, sha256-c0363c59f1040dc0670595bbdc01ee07485cd8697242fcd269ad703bf1d23bb5, sha256-c5ad5fbacf7fe1076a53c4d4171c76a26c0c1944807a7d168fe31e24fe24c075, sha256-cfcb434f144e81354407b8e72c89929c867ace1741f88e995106140bb3e142f1, sha256-d1ff59d58b0fa4d60dd9ef7b4ed13cc2b336e1e8dc499f619511a711c47776e0, sha256-e3fc0c1f627b5c05ce2666859f4b3be62fb929a742652062e30b5894def0a097, sha256-f2214ce36ed75f59cee0b2ab4ab42f29401e521419d004238eb07c5d0321b1f1, sha256-f99e39bd4848c0806e49774203c1eaf04921d260e66d2981265cbc26aeafaee4, sha256-fb670be32b8ca1dec57554b9e14925b6d4c590033056230fcb608d22cb697e32.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.