Ubuntu 24.04 Podman rootless¶

Ubuntu 24.04 distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-ubuntu-24.04-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: docker.io/library/ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:40.392935+00:00.

Observed latest index digest: sha256:03cc3fe51c4a085e7a8ad351391e2d0b5f629686922dedefb6af8a0ffee2d0b9.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-ubuntu-24.04-rootless@sha256:03cc3fe51c4a085e7a8ad351391e2d0b5f629686922dedefb6af8a0ffee2d0b9

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-ubuntu-24.04-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-34467907908-1-sha-a026ea524fc723fa43f68f0321975805979120ec, run-35100033634-1-sha-0fd1fabe5cd28ddbaf47241a233488503dbc84de, run-35456608437-1-sha-a16d02f379a02b0376fff921f04fdcce0667f105, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-0fd1fabe5cd28ddbaf47241a233488503dbc84de, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-a026ea524fc723fa43f68f0321975805979120ec, sha-a16d02f379a02b0376fff921f04fdcce0667f105, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha256-005f91aa99b1c7182366869f6f94b910056c16303beab7d59fefcb110c7f333f, sha256-031d4012e2d80e6a72b8b655e32afe7470ab317b9cc84f7ceb8c3a9ea874f6e4, sha256-03cc3fe51c4a085e7a8ad351391e2d0b5f629686922dedefb6af8a0ffee2d0b9, sha256-04242174d726af0e0c142ade4cfc150438e60ce5682d6157986322ab7da03a2c, sha256-0c0251ea7216cc876f260b9feea96534dd7e2e13346f6f00a6f096ec0d931c6b, sha256-0faa298373612e0ed3d816340a942ef6b1dbe7ee6eef89f872d09f9342550c96, sha256-16324e2590eb376d1e6ad9eb895f40183270d4114f216317fa1047567d37828a, sha256-27cfa1fff818b355ca87563d0bca1d3b72fc422303a6aa84d609a0a7daf95950, sha256-2e8fc6c23f11cf39e273d488b3acbf4e9d105a1b3a7d85128b958b1b1b2a5808, sha256-3b6187eb8ce9192c26213456a8e02047c7d3856f0c9d12c75b5276335394ca79, sha256-47c80dd9e2accbe196dab50a689446d65aa7d8508e01c2ff51a622271d258c53, sha256-501fd6af9afad4b2c632cd69f5cc870d42e264874e7eb92a7b9bd58fede4af4a, sha256-521c31af90be68bc60a5c2391a718308d2f3b7092625fbfbd20d1af0f9f56290, sha256-5a0b8b4f98a026ace4bc44e8f7f82d78472a256668587770af56ca3b0be3c9a4, sha256-5b440b0ae2b7de4769eaeb3c554dd2b690a606495b61badde8ef99b6e379d178, sha256-7d812b2fcd989f05d296b66e29d30b0476b2c993f672608c980dc673c3b3cf9d, sha256-8a274b8871fc9cf886ba2bcdbb323735495a42d49bfecfee11ea784e7e5c4542, sha256-8e0164366f20db3bbde17dfe95c51775da7ea9188651867e18b005dd23603129, sha256-921112c4f2ff0f30ff415f5e4d92a4902e8c57ea41befd536ee3b714769252ac, sha256-9596cef4babc03200dfd4c2466119b79ed3978be4a3a278baad448b45943d63d, sha256-9688785fc41d8e3b59d8bf4a93a6e836b4d1fff708b84b2385f4f34d7ccd82de, sha256-993c6dfd06389c8a86e89650b3899edc00ef4f7be96f7dcb4caf5f7684044043, sha256-9f9d993e92a23aa261a731fc703e4ed0828f7b83244c86be4aa1007b8ce4bf5d, sha256-b05c4966a49122932198956e1bf59efdc60cb944d783753a2c29827c191476f6, sha256-b0f1578602bef1126fc4cb368b41b4ee1135b140050547ab3f84861bce6f3e0a, sha256-b671c04c77f285192ae0f53429ffddf73ea972e2a00366e5924972efbf6fd991, sha256-c508a5898a3b8ebc1646321fa010562bcef99b6b62dc1973c2efb2bf7cbb932d, sha256-d4ad2f2910be54a45d1847c4fbc2439258b9e9017e0699f471984b4899f39a6e, sha256-d503cbc22aaf601c2e32afd7d37f8939ea2dc8cb9683742a9a83b592d108af66, sha256-d6d5a19583a500469072f13c58b12c69ebdd419ecc82c81801eff98c5c178506, sha256-dd1d3ed785d23e9b3985d2486d481e7cb6cee4d5f9b78c6acba455c873a2ad4a, sha256-e39981ee9f34773d03342e638e3c84765112dbfff692a1b9318c526b5d6a9d75, sha256-eeeb63998912804e264c676104d02e1ebed5fc73b5f5b8bae253a69158a0f2f7, sha256-f19a876719d36de7c0a4a0eb6118ff2347b872f9a8b4d1be8a2b28909a31c6ec, sha256-f27a7a9b0de4299e616acd08621ea9347cb6b80343d1dece59586563eb5337d9, sha256-fc4357f6807103dc7c8f2074f61beb1f7e2dd8e8f39de31f7b74b82375e5f0cc.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.