Ubuntu 26.04 Podman rootless¶

Ubuntu 26.04 distro-packaged Podman rootless compatibility image for CI

Image: ghcr.io/strukturpiloten/podman-ubuntu-26.04-rootless
Declared image version: v1.0.0
Family: Podman
Architecture: amd64, arm64
Inner mode: rootless

Declared runtime base: docker.io/library/ubuntu:26.04@sha256:da6fc2be547864451aa253836dd926da33623312df4a9a243e35dc877c378a78

Image source and metadata · GHCR package · Detailed guide

Choose and inspect¶

The distribution selects the installed engine package at build time. Inspect the published image's component manifest or SBOM for its exact revision.

Declared tags: v1.0.0, v1.0, v1, main, latest. These are publication policy aliases, not proof that any tag exists in GHCR. Even the exact SemVer tag can move after a reviewed rebuild.

Registry status: observed; checked at 2026-09-28T10:17:43.209326+00:00.

Observed latest index digest: sha256:180ad1909c5f2ebd7555967b376fc32e48586c006b28a7e82e1ee1286a6062ce.

Pull the observed immutable artifact:

podman pull ghcr.io/strukturpiloten/podman-ubuntu-26.04-rootless@sha256:180ad1909c5f2ebd7555967b376fc32e48586c006b28a7e82e1ee1286a6062ce

A CLI check can run without a nested workload:

podman run --rm ghcr.io/strukturpiloten/podman-ubuntu-26.04-rootless:v1.0.0 podman --version

Nested workloads require the profile-specific outer privilege and device setup in the detailed guide. Some rootless distro profiles intentionally omit nested workload checks.

Support and runtime contract¶

Lifecycle: maintained; admission: isolated-test; review after: 2026-12-31.

Repository rebuilds refresh distribution packages; vendor support determines installed Podman security maintenance.

Declared runtime profiles: podman. Declared test settings are in the metadata source. Admission is policy, not evidence of a passed test.

Declared runtime test contract:

{
  "podman": {
    "mode": "rootless",
    "outerPrivilege": "privileged"
  }
}

Registry aliases and history¶

Aliases resolved to the observed current digest: latest, main, v1, v1.0, v1.0.0.

Listed without digest resolution: run-32739402388-1-sha-f0259a080e8a49be43358fc00c4cac89528d4954, run-32808812826-1-sha-34e7193852a44ffade6d186f9c664368856ccb6c, run-32930106309-1-sha-36f12397c825a765d498654657c2cfa99ae413c9, run-33084138768-1-sha-501915f06c2f36c0254a08ad5c70ae9ec14c9a64, run-33304142817-1-sha-30faee7ada474e455a43b7abf2d90bbf24977056, run-33369549209-1-sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, run-33380856986-1-sha-699c4fd9be1a508c33387aa87e6211de92d6e480, run-34522902394-1-sha-373e37dbf9c72c7ce7238cc27ad28976bed174f0, run-35178800171-1-sha-f763ff720a47b7c9575a2c5ce156d75427260a30, run-35473755450-1-sha-05788557514e3be532041c14cc87f572fd235d8f, run-36320630115-1-sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, run-36346260768-1-sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-05788557514e3be532041c14cc87f572fd235d8f, sha-0b136a13a8bb612d91960ae5d07e72f449c89ec1, sha-373e37dbf9c72c7ce7238cc27ad28976bed174f0, sha-73e79fd9ca8cffa73bd60d360c8db2929271d48a, sha-8ba6168227ce22ebd58ab732a665d717cbcd54ab, sha-f0259a080e8a49be43358fc00c4cac89528d4954, sha-f763ff720a47b7c9575a2c5ce156d75427260a30, sha256-04994850f604e604794277cc0adc0265b5d2586479568cca2ee901bd226c88e9, sha256-056ff93d0bf5be812c5b8e478f94bc4eca4c00c5fddca1c857015ca1edfe0e8d, sha256-09c160f3ca5a18ebc5c141f856550135825a5008af77803304adff1ac585d9db, sha256-180ad1909c5f2ebd7555967b376fc32e48586c006b28a7e82e1ee1286a6062ce, sha256-1fd684c529f60159ca9d6dd6bd85836b06864755695909f88e9e908f6f9d23c8, sha256-2564504fc99c9c18b2dbcdc6072277664dd13532194feacd61410165b00fa9e9, sha256-30a643d01023c64db4acf4ff3176a9abe39302cd96a6f61eb14ba914cacadabf, sha256-385364705455e0faf413efe5fd7046578e7e5d28914873123ea65119bfdc6670, sha256-3891652474d20dacd61c1ce7dacba2072283fb04a6027059ec22fd5dc51058e7, sha256-46b604b538b72190506fffcf5ce010dcd7e87f5a81624d8ea526b934a21ea976, sha256-47fce3d4b73cc8b76dbd9a337621b3cc00fcb90d464c77b6b22f141a792db73c, sha256-4e0492b27b0edaa50ac74822d71a322aa3be87f00b83ae87422d779dc88fe332, sha256-4f3340444313055c3c692cad6467a6be8debea6e4d65ecb411862135772f4340, sha256-5361a3b56fa82b1dbdc46deccc3be81d85429324e440f058d708245db346ca61, sha256-6501e3c5bce8bb05070f9678ee8381f85fea280f282f2cf1e6708e7a7ac2533c, sha256-65dc4e636ab0f56ffb39b860197a20de60f833439fbdfc230a69a74656da4c94, sha256-716d61bee7f9451707bdf97908129db244ede2e604ef05ef16c7fe8f996604d2, sha256-72226c7ba55660b93c21e97816b997d483f32594cc37acea92617543ee4351dc, sha256-7614c014cbd444ecaadedf34693732e8bffccede4746edb4505dd74ca3f7896c, sha256-80c846e8e2b8da7cbbabb1d629e7db0c7d2a654765c327ed9031141a7cf478e3, sha256-899ee6eaf3c781ef2a2d2fde0abf7268b5f5ce2a6ef3e6b751b211bfce31f22a, sha256-8b56bb885866b8d798ad865dd0b271772eaa0a5d010671c588c9c794b4f8e727, sha256-9a24209bc558824c23c1fa928c50180f76b4da09a202c70d28fef9547d626201, sha256-9c7f462312c78bccf758f5a2912ad084bc968e56b9991da547f4dae53e121e37, sha256-a069cf0415bd5a560685eb4593d571a4052e4b833d377b5686fdb311bab4c7d6, sha256-b00384e9bf82f8f8a8afc06543851f6f967cd596d63a2da2cbe2831833d2dea1, sha256-b1c4c6369266306715765fba36134c2e86f4e60c6cbb73a744c5600ae7c1681c, sha256-b2046f0fb7485a7fd0586722f66de173168b61c3a0af0cee1769105ba955d9bb, sha256-bef1313eb939ff85544e6a6c1f8f624261c126f56f7efb594e3a0b0acd677c97, sha256-c0182fc63863a178f2c59d60648763782f567214f5e119735ec2e4f410ea294e, sha256-cd5a08268ef14c1e7881b384d752c5920872c528fca976dad58b4c0d94c4f51e, sha256-d02b7a5d823a03efa5b27348594ac9c7e9c845f8178a8739d8b96b969af4cc31, sha256-d491b1a0d8a9e6c8e9cd83d15789cb3ba37980ae86a448f5904d8272f107638e, sha256-f499f50928ad1d4c4dda8d4a82dca161b8d818445bdedfa718b7843c795ffd83, sha256-fb7ea1317ffea92a6de90598f5afbe4e577e771e31c396b0bf9226603fb994c6, sha256-fe3bd2530726bba8de063b34d031c28060a8bce22bb32f5f4b82503de915387b.

Evidence and timestamps¶

Matching release asset verified the build record and per-architecture runtime and scan evidence. Signature and provenance remain unverified in this snapshot.

Maintenance release · Evidence asset

GitHub package activity can include signatures and attestations; it does not identify when the current runnable image was published. A registry observation is a point-in-time check; mutable tags may move afterward. Use the immutable digest and maintenance evidence for an audit.