Using binary

This section describes the standard procedure for installing the OpenBao command‑line interface (CLI) on Ubuntu systems. The installation uses the official .deb package provided in the OpenBao release artifacts.
 

1. Downloading the OpenBao Package (Ubuntu & Rocky Linux)

The OpenBao CLI is distributed as platform‑specific packages through the official GitHub release artifacts. This section describes how to download the correct package for Ubuntu (DEB) and Rocky Linux (RPM).

Ubuntu (DEB package)

Ubuntu uses .deb packages. Download the latest OpenBao release for amd64:

curl -LO https://github.com/openbao/openbao/releases/latest/download/openbao_<version>_linux_amd64.deb

Replace <version> with the desired release (e.g., 2.6.2).

Verify the checksum (optional):

sha256sum openbao_<version>_linux_amd64.deb

Install:

sudo apt install ./openbao_<version>_linux_amd64.deb

Rocky Linux (RPM package)

Rocky Linux uses .rpm packages. Download the latest OpenBao release for amd64:

curl -LO https://github.com/openbao/openbao/releases/latest/download/openbao_<version>_linux_amd64.rpm

Verify the checksum (optional):

sha256sum openbao_<version>_linux_amd64.rpm

Install:

sudo dnf install -y openbao_<version>_linux_amd64.rpm

2. Verify the installation

Confirm that the CLI is available:
 

bao --version

3. Configure the OpenBao endpoint

Set the address of the EWC Secret Manager instance:
Codice
 

export BAO_ADDR="https://secrets.europeanweather.cloud"

This environment variable ensures that all CLI commands target the correct endpoint.
 

4. Authenticate using OIDC

Start the login flow

bao login -method=oidc

A browser window will open where you can authenticate using your EWC IAM tenancy credentials. If doesn't open on some Operating System, you can copy the URL provided and paste it in the browser.
 

5. Test basic CLI operations

Example commands:

Read a secret:
 

bao kv get kv/data/example

List secrets:

bao kv list kv/data/

If you want, I can also prepare a second Confluence page for:

• OIDC authentication

• Namespaces

• Secret engines

• External Secrets Operator integration

Just tell me which one you want next.