Mirrored RPM package repository for OpenBao. Package signatures and repository metadata are verified at sync time; configure DNF/YUM with the keys below.
Configure repository
Add the repository file, then install with DNF. YUM/DNF substitutes $basearch automatically.
Credentials are stored in /etc/yum.repos.d/openbao.repo (mode 0600). Your username is filled in when signed in; enter your access key at the hidden prompt (input is not echoed). After your administrator rotates a key, re-run these commands or update the credential file(s). Delete /etc/yum.repos.d/openbao.repo to remove the repository configuration.
read -rs ACCESS_KEY
sudo install -m 0600 /dev/null /etc/yum.repos.d/openbao.repo
sudo tee /etc/yum.repos.d/openbao.repo > /dev/null <<EOF
[openbao]
name=openbao
baseurl=https://releases.adfinis.com/pulp/content/openbao/rpm/\$basearch/
username=<CLIENT_NAME>
password=${ACCESS_KEY}
enabled=1
# Package signatures: verified with the upstream key (gpgcheck).
# Repository metadata: signed by the Adfinis mirror (repo_gpgcheck).
# List both keys under gpgkey so DNF can import them for packages and metadata.
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://openbao.org/assets/openbao-gpg-pub-20240618.asc https://releases.adfinis.com/keys/adfinis-repo-metadata.asc
EOF
unset ACCESS_KEY
sudo dnf install openbaoSigning keys
Package signatures are verified against the upstream key during sync. Repository metadata on this mirror is signed with the Adfinis metadata key.
| Key | Fingerprint | Distribution |
|---|---|---|
| OpenBao package signing key | 66D15FDD87287219C8E15478D200CD702853E6D0 | Download |
Verify a key fingerprint before import:
curl -fsSL https://releases.adfinis.com/keys/adfinis-repo-metadata.asc | gpg --show-keys --with-fingerprint
Available architectures
x86_64, aarch64, armv6hl, ppc64le, riscv64, s390x