# Installer openbao avec Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, winget Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de openbao pour les workflows d'agents IA. ## installation ```sh sudo av install brew:openbao ``` Commandes d'installation supplémentaires: ### macOS - Homebrew (100%): ```sh brew install openbao ``` Preuve: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install openbao ``` Preuve: MacPorts ports tree: security/openbao/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add openbao ``` Preuve: Alpine Linux edge package indexes: openbao from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install openbao ``` Preuve: Fedora Rawhide package metadata: openbao from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#openbao ``` Preuve: nixpkgs package indexes: pkgs/by-name/op/openbao/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S openbao ``` Preuve: Arch Linux sync databases: openbao from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install openbao ``` Preuve: openSUSE Tumbleweed package metadata: openbao from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - winget (92%): ```sh winget install --id OpenBao.OpenBao -e ``` Preuve: Windows Package Manager source index: OpenBao.OpenBao from https://cdn.winget.microsoft.com/cache/source.msix ## Faits du paquet - **Clé du paquet:** brew:openbao - **Gestionnaire de paquets:** Homebrew - **Version:** 2.6.1 - **Résumé source:** Provides a software solution to manage, store, and distribute sensitive data - **Page d'accueil:** - **Dépôt:** - **Dernière mise à jour:** 2026-07-27T23:46:51+02:00 - **Généré:** 2026-08-03T19:37:03+00:00 ## exécutables - bao (alias) ## Comportement d'installation - Bouteille: non disponible ## Version et fraîcheur - page générée: 2026-08-03 - version du gestionnaire: 2.6.1 ## Historique du projet et usages OpenBao is an open source, community-governed fork of HashiCorp Vault for managing secrets, certificates, keys, identity-based access, leasing, dynamic credentials, and encryption services. ### Historique du projet OpenBao began after HashiCorp's Vault ecosystem split over licensing. The project forked from the MPL-licensed Vault 1.14.x line and set its mission around preserving an OSI-approved open source secrets-management system under open governance. The project produced its initial general-availability release as OpenBao v2.0.0, with release notes listing July 16, 2024 as the 2.0.0 release date and the project blog announcing general availability on July 25, 2024. That first GA release emphasized stabilizing the fork, reducing binary size, and giving the community room to make governance and ecosystem decisions. OpenBao later moved from LF Edge into the Open Source Security Foundation. The OpenBao blog announced OpenSSF sandbox acceptance on June 17, 2025, describing the move as a better alignment with security professionals and open source maintainers. ### Historique d'adoption The project's homepage lists supporters including EdgeX Foundry Development, Open Horizon Development, IOTech Systems, Viaccess-Orca, WALLIX, GitLab, SAP, NeoNephos, Adfinis, and Liquid Reply. That roster reflects why the fork mattered: organizations already using Vault-like workflows wanted a governed open source continuation point. OpenBao's migration guide explicitly targets in-place migration from Vault Community Edition clusters and states that OpenBao's API should be compatible with Vault enough that existing clients should not register a difference. That compatibility promise shaped adoption by making OpenBao a packaging and operations substitution rather than a ground-up secrets-manager migration. ### Modes d'utilisation Operators run the `bao` server and CLI to store key/value secrets, issue dynamic credentials for systems such as Kubernetes and SQL databases, manage PKI/certificates, lease and revoke secrets, and expose encryption-as-a-service behind authentication and authorization policies. Developers integrate OpenBao through the HTTP API, the Go API module, existing Vault-compatible client patterns, and package-manager deployments. Its documentation describes use through UI, CLI, and API, but release notes for 2.0.x also warned that early OpenBao 2.0 releases did not include the built-in Web UI, making CLI and API operation central for the initial GA line. ### Pourquoi les passionnés de paquets s'y intéressent OpenBao is significant because it turned a license-change event into a distro-visible package. Package maintainers got a new upstream with MPL-2.0 licensing, OpenSSF governance, native packages for common Linux distributions, and a binary named `bao` that deliberately avoids colliding with `vault` while keeping familiar operational behavior. It also shows the practical side of forks: compatibility, migration guides, release cadence, CVE process, plugin policy, and package distribution matter at least as much as the fork announcement. For security-sensitive packages, governance and release process are part of the artifact. ### Chronologie - 2023-06-21: HashiCorp announced Vault 1.14.0, part of the MPL-licensed branch OpenBao later targeted. - 2024-03-29: OpenBao published its 2.0.0 alpha release. - 2024-07-16: OpenBao v2.0.0 GA release date in the project release notes. - 2024-07-25: The OpenBao blog announced v2.0.0 as the initial GA release. - 2025-06-17: OpenBao announced acceptance as an OpenSSF sandbox project. ### Related projects - OpenBao is historically tied to HashiCorp Vault and operationally tied to Vault-compatible clients, auth methods, secret engines, and migration workflows. Its governance home links it to OpenSSF and the Linux Foundation, while infrastructure users often compare it with OpenTofu because both emerged as open source continuity projects after HashiCorp license changes. ### Sources - - - - - - - ## Notes de sécurité formula declares a Homebrew service. - **Risque Geiger:** orange / moyen - formula declares a Homebrew service ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.bao ## Credential files - Unix: ~/.vault-token ## Autres enregistrements de gestionnaires de paquets - Nix - openbao: normalized package name match | nixpkgs package indexes: pkgs/by-name/op/openbao/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - openbao - 2.6.0-r1: normalized package name match | Alpine Linux edge package indexes: openbao from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | solution to manage, store, and distribute sensitive data including secrets, certificates, and keys | https://openbao.org/ - apk - openbao-openrc - 2.6.0-r1: normalized package name match | Alpine Linux edge package indexes: openbao-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | solution to manage, store, and distribute sensitive data including secrets, certificates, and keys (OpenRC init scripts) | https://openbao.org/ - dnf - openbao - 2.6.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: openbao from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A tool for securely accessing secrets | https://openbao.org - dnf - openbao-vault-compat - 2.6.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: openbao-vault-compat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Vault-compatible command and service | https://openbao.org - pacman - openbao - 2.6.1-1: normalized package name match | Arch Linux sync databases: openbao from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | solution to manage, store, and distribute sensitive data | https://openbao.org - zypper - openbao - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Manage, store, and distribute sensitive data | https://github.com/openbao/openbao - zypper - openbao-agent - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-agent from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao agent | https://github.com/openbao/openbao - zypper - openbao-cassandra-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-cassandra-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for Cassandra | https://github.com/openbao/openbao - zypper - openbao-influxdb-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-influxdb-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for InfluxDB | https://github.com/openbao/openbao - zypper - openbao-mysql-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-mysql-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for MySQL | https://github.com/openbao/openbao - zypper - openbao-mysql-legacy-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-mysql-legacy-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for MySQL Legacy | https://github.com/openbao/openbao - zypper - openbao-postgresql-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-postgresql-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for PostgreSQL | https://github.com/openbao/openbao - zypper - openbao-server - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-server from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao server | https://github.com/openbao/openbao - MacPorts - openbao: normalized package name match | MacPorts ports tree: security/openbao/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - OpenBao.OpenBao: normalized package name match | Windows Package Manager source index: OpenBao.OpenBao from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/openbao.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openbao.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph