Using binary

This section describes the standard procedure for installing the OpenBao command‑line interface (CLI) on Ubuntu systems. The installation uses the official .deb package provided in the OpenBao release artifacts.
 

1. Download the OpenBao package

Download the latest package for your architecture:

 For example for Ubuntu:

curl -LO https://github.com/openbao/openbao/releases/latest/download/openbao_<version>_linux_amd64.deb

Replace <version> with the desired release (e.g., 2.6.2).

 For example for Rocky:
 TBD

2. (Optional) Verify the checksum

Compare the SHA‑256 checksum of the downloaded file with the value published in the release metadata:
 

sha256sum openbao_<version>_linux_amd64.deb

This step ensures the integrity of the downloaded package.
 

3. Install the package

Use apt to install the CLI:
 

sudo apt install ./openbao_<version>_linux_amd64.deb

This installs the bao binary under /usr/bin/bao and performs initial configuration steps such as generating TLS material.
 

4. Verify the installation

Confirm that the CLI is available:
 

bao --version

5. Configure the OpenBao endpoint

Set the address of the EWC Secret Manager instance:
Codice
 

export BAO_ADDR="https://secrets.europeanweather.cloud"

This environment variable ensures that all CLI commands target the correct endpoint.
 

6. Authenticate using OIDC

Start the login flow

bao login -method=oidc

A browser window will open where you can authenticate using your EWC IAM tenancy credentials.
 

7. Test basic CLI operations

Example commands:

Read a secret:
 

bao kv get kv/data/example

List secrets:

bao kv list kv/data/

If you want, I can also prepare a second Confluence page for:

• OIDC authentication

• Namespaces

• Secret engines

• External Secrets Operator integration

Just tell me which one you want next.