Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This section describes the standard procedure for installing the OpenBao command‑line interface (CLI) on Ubuntu systems. The installation uses the official .deb package provided in the OpenBao release artifacts.
 

1.

...

Downloading the OpenBao Package (Ubuntu & Rocky Linux)

The OpenBao CLI is distributed as platform‑specific packages through the official GitHub release artifacts. This section describes how to download the correct package for Ubuntu (DEB) and Rocky Linux (RPM).

Ubuntu (DEB package)

Ubuntu uses .deb packages. Download the latest OpenBao release for amd64

...

Download the latest package for your architecture:

 For example for Ubuntu:

curl -LO https://github.com/openbao/openbao/releases/latest/download/openbao_<version>_linux_amd64.deb

Replace <version> with the desired release (e.g., 2.6.2). For example for Rocky:
 TBD

...

Verify the checksum

...

Compare the SHA‑256 checksum of the downloaded file with the value published in the release metadata:
 (optional):

sha256sum openbao_<version>_linux_amd64.deb

...

...

Install

...

Use apt to install the CLI: 

sudo apt install ./openbao_<version>_linux_amd64.deb

This installs the bao binary under /usr/bin/bao and performs initial configuration steps such as generating TLS material.
 

...


 

Rocky Linux (RPM package)

Rocky Linux uses .rpm packages. Download the latest OpenBao release for amd64:

curl -LO https://github.com/openbao/openbao/releases/latest/download/openbao_<version>_linux_amd64.rpm

Verify the checksum (optional):

sha256sum openbao_<version>_linux_amd64.rpm

Install:

sudo dnf install -y openbao_<version>_linux_amd64.rpm


2. Verify the installation

Confirm that the CLI is available:
 

bao --version

...


3. Configure the OpenBao endpoint

Set the address of the EWC Secret Manager instance:
Codice
 

...

This environment variable ensures that all CLI commands target the correct endpoint.
 

...

4. Authenticate using OIDC

Start the login flow

bao login -method=oidc

A browser window will open where you can authenticate using your EWC IAM tenancy credentials.
 

...

5. Test basic CLI operations

Example commands:

Read a secret:
 

...