# 使用 Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, winget 安装 openbao 查看 openbao 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:openbao ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install openbao ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install openbao ``` 证据: MacPorts ports tree: security/openbao/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add openbao ``` 证据: Alpine Linux edge package indexes: openbao from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install openbao ``` 证据: Fedora Rawhide package metadata: openbao from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#openbao ``` 证据: nixpkgs package indexes: pkgs/by-name/op/openbao/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S openbao ``` 证据: Arch Linux sync databases: openbao from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install openbao ``` 证据: openSUSE Tumbleweed package metadata: openbao from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - winget (92%): ```sh winget install --id OpenBao.OpenBao -e ``` 证据: Windows Package Manager source index: OpenBao.OpenBao from https://cdn.winget.microsoft.com/cache/source.msix ## 软件包事实 - **软件包键:** brew:openbao - **软件包管理器:** Homebrew - **版本:** 2.6.1 - **来源摘要:** Provides a software solution to manage, store, and distribute sensitive data - **主页:** - **仓库:** - **最后更新:** 2026-07-27T23:46:51+02:00 - **已生成:** 2026-08-03T19:37:03+00:00 ## 可执行文件 - bao (别名) ## 安装行为 - Bottle: 不可用 ## 版本和新鲜度 - 页面生成时间: 2026-08-03 - 管理器版本: 2.6.1 ## 项目历史与用法 OpenBao is an open source, community-governed fork of HashiCorp Vault for managing secrets, certificates, keys, identity-based access, leasing, dynamic credentials, and encryption services. ### 项目历史 OpenBao began after HashiCorp's Vault ecosystem split over licensing. The project forked from the MPL-licensed Vault 1.14.x line and set its mission around preserving an OSI-approved open source secrets-management system under open governance. The project produced its initial general-availability release as OpenBao v2.0.0, with release notes listing July 16, 2024 as the 2.0.0 release date and the project blog announcing general availability on July 25, 2024. That first GA release emphasized stabilizing the fork, reducing binary size, and giving the community room to make governance and ecosystem decisions. OpenBao later moved from LF Edge into the Open Source Security Foundation. The OpenBao blog announced OpenSSF sandbox acceptance on June 17, 2025, describing the move as a better alignment with security professionals and open source maintainers. ### 采用历史 The project's homepage lists supporters including EdgeX Foundry Development, Open Horizon Development, IOTech Systems, Viaccess-Orca, WALLIX, GitLab, SAP, NeoNephos, Adfinis, and Liquid Reply. That roster reflects why the fork mattered: organizations already using Vault-like workflows wanted a governed open source continuation point. OpenBao's migration guide explicitly targets in-place migration from Vault Community Edition clusters and states that OpenBao's API should be compatible with Vault enough that existing clients should not register a difference. That compatibility promise shaped adoption by making OpenBao a packaging and operations substitution rather than a ground-up secrets-manager migration. ### 使用方式 Operators run the `bao` server and CLI to store key/value secrets, issue dynamic credentials for systems such as Kubernetes and SQL databases, manage PKI/certificates, lease and revoke secrets, and expose encryption-as-a-service behind authentication and authorization policies. Developers integrate OpenBao through the HTTP API, the Go API module, existing Vault-compatible client patterns, and package-manager deployments. Its documentation describes use through UI, CLI, and API, but release notes for 2.0.x also warned that early OpenBao 2.0 releases did not include the built-in Web UI, making CLI and API operation central for the initial GA line. ### 为什么软件包爱好者会关心 OpenBao is significant because it turned a license-change event into a distro-visible package. Package maintainers got a new upstream with MPL-2.0 licensing, OpenSSF governance, native packages for common Linux distributions, and a binary named `bao` that deliberately avoids colliding with `vault` while keeping familiar operational behavior. It also shows the practical side of forks: compatibility, migration guides, release cadence, CVE process, plugin policy, and package distribution matter at least as much as the fork announcement. For security-sensitive packages, governance and release process are part of the artifact. ### 时间线 - 2023-06-21: HashiCorp announced Vault 1.14.0, part of the MPL-licensed branch OpenBao later targeted. - 2024-03-29: OpenBao published its 2.0.0 alpha release. - 2024-07-16: OpenBao v2.0.0 GA release date in the project release notes. - 2024-07-25: The OpenBao blog announced v2.0.0 as the initial GA release. - 2025-06-17: OpenBao announced acceptance as an OpenSSF sandbox project. ### Related projects - OpenBao is historically tied to HashiCorp Vault and operationally tied to Vault-compatible clients, auth methods, secret engines, and migration workflows. Its governance home links it to OpenSSF and the Linux Foundation, while infrastructure users often compare it with OpenTofu because both emerged as open source continuity projects after HashiCorp license changes. ### 来源 - - - - - - - ## 安全说明 formula declares a Homebrew service. - **Geiger 风险:** orange / 中 - formula declares a Homebrew service ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.bao ## Credential files - Unix: ~/.vault-token ## 其他软件包管理器记录 - Nix - openbao: normalized package name match | nixpkgs package indexes: pkgs/by-name/op/openbao/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - openbao - 2.6.0-r1: normalized package name match | Alpine Linux edge package indexes: openbao from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | solution to manage, store, and distribute sensitive data including secrets, certificates, and keys | https://openbao.org/ - apk - openbao-openrc - 2.6.0-r1: normalized package name match | Alpine Linux edge package indexes: openbao-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | solution to manage, store, and distribute sensitive data including secrets, certificates, and keys (OpenRC init scripts) | https://openbao.org/ - dnf - openbao - 2.6.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: openbao from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A tool for securely accessing secrets | https://openbao.org - dnf - openbao-vault-compat - 2.6.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: openbao-vault-compat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Vault-compatible command and service | https://openbao.org - pacman - openbao - 2.6.1-1: normalized package name match | Arch Linux sync databases: openbao from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | solution to manage, store, and distribute sensitive data | https://openbao.org - zypper - openbao - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Manage, store, and distribute sensitive data | https://github.com/openbao/openbao - zypper - openbao-agent - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-agent from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao agent | https://github.com/openbao/openbao - zypper - openbao-cassandra-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-cassandra-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for Cassandra | https://github.com/openbao/openbao - zypper - openbao-influxdb-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-influxdb-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for InfluxDB | https://github.com/openbao/openbao - zypper - openbao-mysql-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-mysql-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for MySQL | https://github.com/openbao/openbao - zypper - openbao-mysql-legacy-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-mysql-legacy-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for MySQL Legacy | https://github.com/openbao/openbao - zypper - openbao-postgresql-database-plugin - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-postgresql-database-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao database plugin for PostgreSQL | https://github.com/openbao/openbao - zypper - openbao-server - 2.6.1-1.2: normalized package name match | openSUSE Tumbleweed package metadata: openbao-server from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenBao server | https://github.com/openbao/openbao - MacPorts - openbao: normalized package name match | MacPorts ports tree: security/openbao/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - OpenBao.OpenBao: normalized package name match | Windows Package Manager source index: OpenBao.OpenBao from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/openbao.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openbao.yml) ## 来源 - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph