Ubuntu 26.04 Podman rootful¶

Ubuntu 26.04 distro-packaged Podman rootful compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-ubuntu-26.04-rootful
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootful

Declared runtime base: docker.io/library/ubuntu:26.04@sha256:da6fc2be547864451aa253836dd926da33623312df4a9a243e35dc877c378a78

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:41.952879+00:00.

Observed latest index digest: sha256:bfc13bf5a13cced7d5b2c23dd6b0c8ad3d467e6448e8613eebf9dbecb8a77f27.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-ubuntu-26.04-rootful@sha256:bfc13bf5a13cced7d5b2c23dd6b0c8ad3d467e6448e8613eebf9dbecb8a77f27

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-ubuntu-26.04-rootful:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootful",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-34522902394-1-sha-373e37dbf9c72c7ce7238cc27ad28976bed174f0, run-35178800171-1-sha-f763ff720a47b7c9575a2c5ce156d75427260a30, run-35473755450-1-sha-05788557514e3be532041c14cc87f572fd235d8f, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-05788557514e3be532041c14cc87f572fd235d8f, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-373e37dbf9c72c7ce7238cc27ad28976bed174f0, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f763ff720a47b7c9575a2c5ce156d75427260a30, sha256-01b2d80040c5eb4912f60c9608ab6738ac0ca7c329ca9f60f592c31f5fad7eb1, sha256-137af0e137082f1b580cb8fde3fd7bff41afe84b5147b017e6f9f5e68de29bb5, sha256-18b302a9a94d5a152a6e69dd8190e0f7fd56d6d731176433ee7504a1e8840d05, sha256-190e0e0b029979318ab8ae84a73390c67132991a165072b9d4e39a1a6204fe49, sha256-22d2324878d5de06191a82c5edc4bf7a6e09e2bd4ee4e5487da6817d7155b020, sha256-3bae40e2c330d8e0da6d789fb02c3bae5eb78e69da6a2beea2cb518f71975499, sha256-3f76f07ee252b5dbf112fbbab73b735caaa2dba9276440591054bbb361c5be67, sha256-478ddaba30b46f4cb0f11d275d6a522087fb55afe97c7e69f1a18f84c5b225e6, sha256-47b22d98b08fb617530fc6200af0d08008fb1dc4b74550504b25843e71408697, sha256-4a0e422ee2877660858639dafa325feb206d791b9156697c9e9b2562bf1e6c52, sha256-4dc35dab5b09a53cc0d3b1c217d95babe189f3f32a6763292dd962db6fe75b2b, sha256-5198d597761318a0fabb9f318155b806a52f3b9a2ae46ca3ebeb82801ec7c309, sha256-5b58e267a4567ee8a7a9fc0e685c2874dce1dea9f09980a274894926460e23a4, sha256-67237daf0cfd83970c90922f92362200f1fe3a3a542cace613c4de2c554f2958, sha256-674f626ef2e13f9ba80a681dac65f340c18062eb3a4b2bdb32e74ec1d442f1ea, sha256-681f1e8b4f345b13a274ddd83f8e10f922950b76a121e0a8a74641eb1d6e52e2, sha256-685c48db004fce8a280174acdaa7b9aea2e7d005bf6d77c59564735380f4e47d, sha256-6b6b6537332ca10cc15bf8e8f55151d7abec53af6648341dbd6cfe45679b8a81, sha256-6d435dc9de93f73d1658d5abbd8d037714bba9885547e9ab69980836f53df432, sha256-6f49767aa32b6f1a908fb647a15560f252987ab9c45451e7af7137432791118a, sha256-79348891ae9ad3b45a5ddcb4dc62b33bc14384451ac5177ef10fe40d9ea3a60c, sha256-9726af2f37729bf78520acf7617ebbe1364067072af7c3987d02e4f2653e402b, sha256-9a09e053ae2ecb1fbd0db4c7809a22a7f2d2127e6118049ee0106cff0469a6e7, sha256-a272767bd953eee80a45e96469d3a7c8f16073154d1b67acfe63d492323d85e0, sha256-b4f99c82b2cbfd84032aa50200be04f8c12f3401ecb40526c19d278a93d5c85b, sha256-bb7339d1cbb64a302125ef939385c3294129cbc2681201bb46228c7a2a237fd8, sha256-bcebfb8c7f75b5b97c8f0b84e6a37cc2df72fdbc6bb0ae03bcad9ef48d05688d, sha256-bfc13bf5a13cced7d5b2c23dd6b0c8ad3d467e6448e8613eebf9dbecb8a77f27, sha256-c01b76170f9c3911cc6b0d7219c91c6b0df214ebfc0b936ad25fc3192a3367b7, sha256-c4fcd7b0b4863c6b416edda919d2866f32e22f9df27ba07325678dff8b8b34a7, sha256-c56d44fdd3ce385628b25217a9307b283c247908fd0b56e45beb288a7493cc30, sha256-ce3300f643bb3bf18df32061f6740c9f8cbd402299213e992ec292dd322d73c0, sha256-d31195084877c9178232fb23ca16ee255a15cd8adebde86e3d89b6e6c491eb3e, sha256-ead6010587f1df3587df75578f3353c934ae735c004991dee9683ac498fa4e53, sha256-f1a7d08f6bb56341859f00fa225aeea122de9a5117833af28ca5beb6d0a2f77c, sha256-fb2048b8134b924ce9831a87fe97ef70db663d45a6263ae37e861dcd16aa9511.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.