stack-openbao (latest)

Published 2026-03-02 02:01:05 +00:00 by jason.woltje in mosaic/stack

Pull the image from the command line:

docker pull git.mosaicstack.dev/mosaic/stack-openbao:latest

Digest

sha256:967bed66d4d9741186f6a8c0c98354a7babb3e97f43a8d79db582c0b9b8e8a02

For more information on the Container registry, see the documentation.

OpenBao 2.5.1

Image Layers

ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

ARG BIN_NAME=bao

ARG NAME=openbao

ARG PRODUCT_VERSION

ARG PRODUCT_REVISION

LABEL name=OpenBao maintainer=OpenBao <openbao@lists.openssf.org> vendor=OpenBao version= release= revision= summary=OpenBao is a tool for securely accessing secrets. description=OpenBao is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. OpenBao provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.

COPY LICENSE /licenses/mozilla.txt # buildkit

ENV NAME=openbao

ENV VERSION=

RUN |4 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= /bin/sh -c addgroup ${NAME} && adduser -S -G ${NAME} ${NAME} # buildkit

ARG EXTRA_PACKAGES

RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= EXTRA_PACKAGES= /bin/sh -c apk add --no-cache libcap su-exec dumb-init tzdata ${EXTRA_PACKAGES} # buildkit

COPY bao /bin/ # buildkit

RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= EXTRA_PACKAGES= /bin/sh -c ln -s /bin/${BIN_NAME} /bin/vault # buildkit

RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION= PRODUCT_REVISION= EXTRA_PACKAGES= /bin/sh -c mkdir -p /openbao/logs && mkdir -p /openbao/file && mkdir -p /openbao/config && chown -R ${NAME}:${NAME} /openbao # buildkit

VOLUME [/openbao/logs]

VOLUME [/openbao/file]

EXPOSE [8200/tcp]

COPY .release/docker/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["server" "-dev" "-dev-no-store-token"]

COPY config.hcl /openbao/config/config.hcl

COPY init.sh /openbao/init.sh

Key	Value
description	OpenBao secrets management for Mosaic Stack
maintainer	Mosaic Stack <dev@mosaic.local>
name	OpenBao
org.opencontainers.image.created	2026-02-23T17:49:10Z
org.opencontainers.image.description	OpenBao 2.5.1
org.opencontainers.image.documentation	https://github.com/openbao/openbao/blob/main/README.md
org.opencontainers.image.licenses	MPL-2.0
org.opencontainers.image.revision	e546fae8cbfe95d8f36a351deb2cd23bfb94119e
org.opencontainers.image.source	https://github.com/openbao/openbao
org.opencontainers.image.title	bao
org.opencontainers.image.url	https://github.com/openbao/openbao
org.opencontainers.image.vendor	OpenBao
org.opencontainers.image.version	2.5.1
release	2.5.1
revision	e546fae8cbfe95d8f36a351deb2cd23bfb94119e
summary	OpenBao is a tool for securely accessing secrets.
vendor	OpenBao
version	2.5.1