{"architecture":"amd64","config":{"ExposedPorts":{"8200/tcp":{}},"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","NAME=openbao","VERSION="],"Entrypoint":["docker-entrypoint.sh"],"Cmd":["server","-dev","-dev-no-store-token"],"Volumes":{"/openbao/file":{},"/openbao/logs":{}},"WorkingDir":"/","Labels":{"description":"OpenBao is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. OpenBao provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.","maintainer":"OpenBao \u003copenbao@lists.openssf.org\u003e","name":"OpenBao","release":"v2.4.4","revision":"v2.4.4","summary":"OpenBao is a tool for securely accessing secrets.","vendor":"OpenBao","version":"v2.4.4"},"ArgsEscaped":true},"created":"2026-05-09T06:53:27.046780619-07:00","history":[{"created":"2025-10-08T11:04:56Z","created_by":"ADD alpine-minirootfs-3.22.2-x86_64.tar.gz / # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-10-08T11:04:56Z","created_by":"CMD [\"/bin/sh\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG BIN_NAME","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG NAME=openbao","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG PRODUCT_VERSION","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ARG PRODUCT_REVISION","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"LABEL name=OpenBao maintainer=OpenBao \u003copenbao@lists.openssf.org\u003e vendor=OpenBao version=v2.4.4 release=v2.4.4 revision=v2.4.4 summary=OpenBao is a tool for securely accessing secrets. description=OpenBao is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. OpenBao provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"COPY LICENSE /licenses/mozilla.txt # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ENV NAME=openbao","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:37.983488424-08:00","created_by":"ENV VERSION=","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:38.253939716-08:00","created_by":"RUN |4 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 /bin/sh -c addgroup ${NAME} \u0026\u0026 adduser -S -G ${NAME} ${NAME} # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:38.253939716-08:00","created_by":"ARG EXTRA_PACKAGES","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:39.144317011-08:00","created_by":"RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 EXTRA_PACKAGES= /bin/sh -c apk add --no-cache libcap su-exec dumb-init tzdata ${EXTRA_PACKAGES} # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:39.704471172-08:00","created_by":"COPY bao /bin/ # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.114472325-08:00","created_by":"RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 EXTRA_PACKAGES= /bin/sh -c ln -s /bin/${BIN_NAME} /bin/vault # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"RUN |5 BIN_NAME=bao NAME=openbao PRODUCT_VERSION=v2.4.4 PRODUCT_REVISION=v2.4.4 EXTRA_PACKAGES= /bin/sh -c mkdir -p /openbao/logs \u0026\u0026     mkdir -p /openbao/file \u0026\u0026     mkdir -p /openbao/config \u0026\u0026     chown -R ${NAME}:${NAME} /openbao # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"VOLUME [/openbao/logs]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"VOLUME [/openbao/file]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.423347804-08:00","created_by":"EXPOSE map[8200/tcp:{}]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.579441851-08:00","created_by":"COPY .release/docker/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2025-12-08T21:38:40.579441851-08:00","created_by":"ENTRYPOINT [\"docker-entrypoint.sh\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2025-12-08T21:38:40.579441851-08:00","created_by":"CMD [\"server\" \"-dev\" \"-dev-no-store-token\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2026-05-09T06:53:24.981981178-07:00","created_by":"RUN /bin/sh -c apk update \u0026\u0026 apk add --no-cache openssl # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:25.844298637-07:00","created_by":"RUN /bin/sh -c apk add --no-cache jq=1.8.1-r0 # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:25.890622057-07:00","created_by":"COPY /policy.hcl /policy.hcl # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:25.938606536-07:00","created_by":"COPY /aggregator-policy.hcl /aggregator-policy.hcl # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:26.001636836-07:00","created_by":"COPY /delete.sh /delete.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:26.251589583-07:00","created_by":"RUN /bin/sh -c chmod +w /delete.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:26.511916564-07:00","created_by":"RUN /bin/sh -c chmod +x /delete.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:26.559618579-07:00","created_by":"COPY /init.sh /init.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:26.797640717-07:00","created_by":"RUN /bin/sh -c chmod +w /init.sh # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-05-09T06:53:27.046780619-07:00","created_by":"RUN /bin/sh -c chmod +x /init.sh # buildkit","comment":"buildkit.dockerfile.v0"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:256f393e029fa2063d8c93720da36a74a032bed3355a2bc3e313ad12f8bde9d1","sha256:4d790c4291a1aebee59429da41dbe65708cadb7e78f5ff5eee1bb1985d1a84ff","sha256:4474e1e53b4827939ea0e98e9947831cd93b9ecb358609fcefec744f15d3eca4","sha256:5b9f148c4cfd9a0f1e75794fc160638b9095d86a85b004193d35f8fd7069f2ff","sha256:7cb26b40db7650fa0160244f8b9442dcabf786d247e43776560bad186b35dc58","sha256:7d5e55c868a80cfc99ce8223ff7aa89306b65dd21edceaada8716e91c425fb2c","sha256:10445f5e2836b5ad16255b74c81592edf3dc7baa74e910c0610d249d4b620807","sha256:6079776573e68d1966451f0c85fa2bc98855f866c11d544d20463082249e0ef2","sha256:960e2df99d2d5420a9c1c59932c5a38e7207114fe6c828b8b3d139b19b3fa126","sha256:9904ca392c4e3f57e3c8cbbf96935166036acbfbdeaf6aa032ef866b910aca9d","sha256:5811bd7f25602ddf29d53699f06cd5af27a4d8869eda1d19bdffcf7fb27ecfbe","sha256:a54bd5f52191e9eb66bde492a968a8224a853c1a6834fd9e8db1d28cf3b40e45","sha256:c6802cce8c24ccdc2978c80f0f8731cd555bf562fac4c02190d464f4859b1f59","sha256:e64491e04b2eb64112fda2eea761f17687aeb4421cef8881a492fb6b0dffe661","sha256:632fc4930d8f5df24a3fd2f6e4b31e69fff05c9eb8f0bbc2e3ac5e62d61132c0","sha256:9fb45c88768e5414d74892e9997cbd1db1819c343600e3d97a32aed76b22f816","sha256:fbc7d13ec61e9d29fcaaf33d7872a6a59c4e0e7caa83d031d23fdb9b00e79689","sha256:5bc90bcd42b42e8ecc599f926634efa226ecb83e0bccb24769e419b649da8988"]}}