{"slug":"openbao","tag":"v2.7.2-CE-ubuntu24.04-r2","current":true,"account":false,"tarball":"ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r2.tar.gz","tarball_sha256":"4011a45e960db0a09411bb37bfa900e8da4caf09ed13890cc7348ae56bebf3bc","generated_at":"2026-10-29T19:18:05Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/openbao/openbao","ref":"v2.7.2","commit":"9e0a0d3c3504a0a00b45e61355afac5e35c78379","url":"https://github.com/openbao/openbao/tree/9e0a0d3c3504a0a00b45e61355afac5e35c78379"},"fetches":[{"kind":"git","url":"https://github.com/openbao/openbao","ref":"v2.7.2"}],"bases":[{"image":"golang:1.27.3-bookworm","digest":"sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"]},"build_method":"source-rebuild-go","source_date_epoch":1793043147,"source_date_epoch_utc":"2026-10-26T19:32:27Z","target":{"image":"readystack/openbao:v2.7.2-CE-ubuntu24.04-r2","image_manifest_digest":"sha256:4eafd7bfd952cc01a016796173f74b90d1cd329b8cf8c25f63de5efd0d538696","config_digest":"sha256:b85a6ef3e59e11d7b7807c4dc2223b3715c3c68e1d0f98976b8814841455eceb"},"checksummed_files":23078},"files":[{"path":"BASES.tsv","size":262,"sha256":"203db39d31165cdf0ef7de9050461c107d9b50e5f22ecc1739a0ecbc33f89b79","public":"full","lines":2,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/BASES.tsv","text":"golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5\tbases/golang_1.27.3-bookworm_972b4110ba0f.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":3325734,"sha256":"9a31c0c5ca50e5f39cb46bd88fe0ca64967b260476c3efe2ca5c6616d62e8ceb","public":"account","lines":23078},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":3629,"sha256":"7d3b4d04c711915c3cafb940c9ff768ada93e540256c2d751fe5e1a195035979","public":"account","lines":43},{"path":"Dockerfile.offline","size":3629,"sha256":"7d3b4d04c711915c3cafb940c9ff768ada93e540256c2d751fe5e1a195035979","public":"account","lines":43},{"path":"Dockerfile.offline.pinned","size":3629,"sha256":"7d3b4d04c711915c3cafb940c9ff768ada93e540256c2d751fe5e1a195035979","public":"preview","lines":43,"preview":{"text":"# GENERATED L-009 hermetic build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases from BASE_IMAGE_DIGESTS.lock; vendored Go tree + debs from Dockerfile.vendor.\nFROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS build_bao\nCOPY vendored/openbao-src/ /src/\nWORKDIR /src/\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1793043147\nRUN go build -trimpath -ldflags='-s -w -X github.com/openbao/openbao/v2/internal/version.fullVersion=2.7.2 -X github.com/openbao/openbao/v2/internal/version.GitCommit=9e0a0d3c3504a0a00b45e61355afac5e35c78379' -o /bao . && /bao version > /tmp/bao.version 2>&1; cat /tmp/bao.version; grep -qF '2.7.2' /tmp/bao.version || { echo 'bao version does not report 2.7.2'; exit 1; }\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\nENV DEBIAN_FRONTEND=noninteractive BAO_ADDR=http://127.0.0.1:8200\nRUN --mount=type=bind,source=vendored/debs,target=/tmp/debs \\\n    set --; for f in /tmp/debs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; } && \\\n    rm -rf /var/lib/apt/lists/* \\\n           /var/log/dpkg.log /var/log/alternatives.log /var/log/apt /var/cache/ldconfig/aux-cache /var/cache/fontconfig\nARG SOURCE_DATE_EPOCH=1793043147\nRUN (! getent passwd ubuntu >/dev/null || userdel --remove ubuntu) && groupadd -r -g 1000 openbao && useradd -r -u 100 -g openbao -d /openbao -m openbao && \\\n    mkdir -p /openbao/data /openbao/config && chown -R openbao:openbao /openbao/data /openbao/config && \\\n    : \"${SOURCE_DATE_EPOCH:?SOURCE_DATE_EPOCH must be set for a reproducible build}\" && \\\n    sed -ri \"s/^([^:]*:[^:]*):[0-9]*:/\\1:$((SOURCE_DATE_EPOCH/86400)):/\" /etc/shadow && \\\n    rm -f /etc/passwd- /etc/shadow- /etc/group- /etc/gshadow-\nCOPY --from=build_bao /bao /usr/bin/bao","lines_shown":24,"lines_total":43}},{"path":"Dockerfile.vendor","size":1707,"sha256":"30cc74041cd03872f898ba0cbbe96f113a2a9d9adbeb84fecba4d502558fdeea","public":"account","lines":20},{"path":"MANIFEST.txt","size":1756460,"sha256":"dfbbd29db815a0e92008932f06df3a5d9172d92885e459ae08ee63b6d008c9e2","public":"account","lines":23080},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"1a3cb69c694cdd8fcdd3d6e9bffeac91288ae95926acb791b5203b012272c803","public":"full","lines":1,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/SOURCE_DATE_EPOCH.txt","text":"1793043147\n"},{"path":"TARGET_DIGEST.txt","size":333,"sha256":"6c3c876bbf2bb7da87c5511d45b86452a7ef0e18f596818efbe498374305cfee","public":"full","lines":6,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:4eafd7bfd952cc01a016796173f74b90d1cd329b8cf8c25f63de5efd0d538696\nconfig_digest=sha256:b85a6ef3e59e11d7b7807c4dc2223b3715c3c68e1d0f98976b8814841455eceb\ntag=readystack/openbao:v2.7.2-CE-ubuntu24.04-r2\nprobe_port=8200\nprobe_path=/v1/sys/health?standbyok=true&uninitcode=200&sealedcode=200\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1696,"sha256":"32465229e261bfb64a632dcab908735809f0d96afb2f6fcca0a4e0ed0ab1f48e","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5094,"sha256":"d5f2a51c77d6caf5e16a13ae0ddc481b2314556f518a972496d08720ff54d17d","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1958,"sha256":"c5dfeef3020fb20c37d2fed7453f7a58b20a92d689cdc78d8e1cfd7ada946c6c","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":72,"sha256":"3cd226932daaafa920cbefadc5a17a3cb63ce1a77fb1aa89344675ee4dfde554","public":"full","lines":2,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for openbao (resolve at build_kit)\ngolang:1.27.3-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":2520,"sha256":"0211a1d4a83a82b1b6b6280984c9658d0762c0e57867d7799dde5aea0daa8a30","public":"account","lines":46},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":647,"sha256":"97c436034af1f31e9f20e087946aaad5f1173728c28648438510e5ea0f132837","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":245568,"sha256":"25a3ce4f41e0b9ee7aa06339ea7e60820ecc8cec50930c903a048bb09f527b28","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":305,"sha256":"521b712bd4b3cbd28b2a167f51eb304c3ef556bab299996800981c2907040ca7","public":"full","lines":9,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"openbao\",\n  \"repo\": \"https://github.com/openbao/openbao\",\n  \"ref\": \"v2.7.2\",\n  \"commit\": \"9e0a0d3c3504a0a00b45e61355afac5e35c78379\",\n  \"tree_listing_sha256\": \"39ce90cd211893e1a0f3ef5a1a0ae7df0badaab1b54fd79b9da5b3e7b174369d\",\n  \"file_count\": 5401\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":28,"sha256":"fa091140511e85f86057bf9f05d5bd9e073f13c04af3de77559c304bd4b38227","public":"account","lines":3},{"path":"docs/provenance/TOOLCHAIN.lock","size":3160,"sha256":"4d5a759294b39d6f356ee24f1a44fa33580b4588de1e92fd0daaf7862276f051","public":"account","lines":86},{"path":"openbao.hcl","size":611,"sha256":"472d6276e37e0397a617b197b5932d1705d8acfb6149991e3c925b42065ab613","public":"account","lines":18},{"path":"rebuild.json","size":1486,"sha256":"dd07ab42b4c3b7672fc0dc6586b78f3df559ec032db71277ada7efa8ef60a76b","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/openbao/v2.7.2-CE-ubuntu24.04-r2/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":330381419},"docs":{"files":5452,"bytes":79575537},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":17586,"bytes":222095052}},"links":{"page":"https://readystack.dev/products/openbao/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fopenbao%2Frecipe","kit":"https://readystack.dev/buy.html?product=openbao"}}