{"architecture":"amd64","config":{"ExposedPorts":{"8200/tcp":{}},"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","NAME=openbao","VERSION="],"Entrypoint":["docker-entrypoint.sh"],"Cmd":["server","-dev","-dev-no-store-token"],"Volumes":{"/openbao/file":{},"/openbao/logs":{}},"WorkingDir":"/","Labels":{"description":"OpenBao is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. OpenBao provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.","maintainer":"OpenBao \u003copenbao@lists.openssf.org\u003e","name":"OpenBao","release":"v2.4.4","revision":"v2.4.4","summary":"OpenBao is a tool for securely accessing secrets.","vendor":"OpenBao","version":"v2.4.4"},"ArgsEscaped":true},"created":"2026-04-17T05:25:56.127891678-07:00","history":[{"created":"2025-10-08T11:04:56Z","created_by":"ADD alpine-minirootfs-3.22.2-x86_64.tar.gz / # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-10-08T11:04:56Z","created_by":"CMD [\"/bin/sh\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG BIN_NAME","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG NAME=openbao","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG PRODUCT_VERSION","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG PRODUCT_REVISION","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"LABEL name=OpenBao maintainer=OpenBao \u003copenbao@lists.openssf.org\u003e vendor=OpenBao version=v2.4.4 release=v2.4.4 revision=v2.4.4 summary=OpenBao is a tool for securely accessing secrets. description=OpenBao is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. OpenBao provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"COPY LICENSE /licenses/mozilla.txt # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ENV NAME=openbao","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ENV VERSION=","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:38.253939716-08:00","created_by":"RUN |4 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 /bin/sh -c addgroup ${NAME} \u0026\u0026 adduser -S -G ${NAME} ${NAME} # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:38.253939716-08:00","created_by":"ARG EXTRA_PACKAGES","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:39.144317011-08:00","created_by":"RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 EXTRA_PACKAGES= /bin/sh -c apk add --no-cache libcap su-exec dumb-init tzdata ${EXTRA_PACKAGES} # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:39.704471172-08:00","created_by":"COPY bao /bin/ # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.114472325-08:00","created_by":"RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 EXTRA_PACKAGES= /bin/sh -c ln -s /bin/${BIN_NAME} /bin/vault # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 EXTRA_PACKAGES= /bin/sh -c mkdir -p /openbao/logs \u0026\u0026     mkdir -p /openbao/file \u0026\u0026     mkdir -p /openbao/config \u0026\u0026     chown -R ${NAME}:${NAME} /openbao # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"VOLUME [/openbao/logs]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"VOLUME [/openbao/file]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"EXPOSE map[8200/tcp:{}]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.579441851-08:00","created_by":"COPY .release/docker/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.579441851-08:00","created_by":"ENTRYPOINT [\"docker-entrypoint.sh\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.579441851-08:00","created_by":"CMD [\"server\" \"-dev\" \"-dev-no-store-token\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2026-04-17T05:25:51.473073912-07:00","created_by":"RUN /bin/sh -c apk update \u0026\u0026 apk add --no-cache openssl # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:52.59423499-07:00","created_by":"RUN /bin/sh -c apk add --no-cache jq=1.8.1-r0 # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:52.8960896-07:00","created_by":"COPY /policy.hcl /policy.hcl # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:53.144960879-07:00","created_by":"COPY /aggregator-policy.hcl /aggregator-policy.hcl # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:53.369978174-07:00","created_by":"COPY /delete.sh /delete.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:53.991918604-07:00","created_by":"RUN /bin/sh -c chmod +w /delete.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:54.563184606-07:00","created_by":"RUN /bin/sh -c chmod +x /delete.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:54.766994487-07:00","created_by":"COPY /init.sh /init.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:55.404665255-07:00","created_by":"RUN /bin/sh -c chmod +w /init.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-04-17T05:25:56.127891678-07:00","created_by":"RUN /bin/sh -c chmod +x /init.sh # buildkit","comment":"buildkit.dockerfile.v0"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:256f393e029fa2063d8c93720da36a74a032bed3355a2bc3e313ad12f8bde9d1","sha256:4d790c4291a1aebee59429da41dbe65708cadb7e78f5ff5eee1bb1985d1a84ff","sha256:4474e1e53b4827939ea0e98e9947831cd93b9ecb358609fcefec744f15d3eca4","sha256:5b9f148c4cfd9a0f1e75794fc160638b9095d86a85b004193d35f8fd7069f2ff","sha256:7cb26b40db7650fa0160244f8b9442dcabf786d247e43776560bad186b35dc58","sha256:7d5e55c868a80cfc99ce8223ff7aa89306b65dd21edceaada8716e91c425fb2c","sha256:10445f5e2836b5ad16255b74c81592edf3dc7baa74e910c0610d249d4b620807","sha256:6079776573e68d1966451f0c85fa2bc98855f866c11d544d20463082249e0ef2","sha256:ead440441000665230daa8ac7eb8043558b95d82ebd7cc67c363e50f0b1080cc","sha256:6265eab6a6558e56612dae962f6c07c3d8ff73cadecf59e92d3cf0a62136c201","sha256:e413fa2fb94e2d303cb230e4fcdd8d96d42cec0fd14de1f335588d2ad2e7ac25","sha256:ae0c8c5805e4efcfae2a84646e17b3595e2ea58383c589780547dfe60db2631b","sha256:84dcf620ac3351ad89383864002023a77ef14311aa803159b7dbb386a1c0588b","sha256:bb4b8b17952cff6147205964dfb39182bd2a4b72f70c5c1cfff01512c0aebeb1","sha256:0a395c356043aa43df9978c52939a65441487ae2b74924750e00615f8467f9df","sha256:da2d90acc880da737b20877d5bb4926b18ed94111f4d76cfeeeb3def00d9306c","sha256:995109b2e54c1cc21b2fc61bc9839aefd4ab7a1ad894fe2223e6d1acabcbf76f","sha256:fdeb147c5b4b771aed9b0ba099f9554262efb252efb2b3df7d1b761eec1bda92"]}}