Damien/infra-scripts
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat/lxc-OpenBao #6

Merged
Damien merged 14 commits from feat/lxc-OpenBao into main 2026-05-26 16:54:23 +00:00
Conversation 0 Commits 14 Files Changed 3 +10 -9
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit c7f44aa293 - Show all commits

19
openbao/install.sh
View File

@@ -67,10 +67,12 @@ require_root() {
fi fi
} }
# OpenBao publishes release assets named with the raw `uname -m` arch
# (e.g. x86_64, aarch64), not Go-style amd64/arm64.
get_arch() { get_arch() {
case "$(uname -m)" in case "$(uname -m)" in
x86_64) echo "amd64" ;; x86_64) echo "x86_64" ;;
aarch64) echo "arm64" ;; aarch64) echo "aarch64" ;;
*) log_error "Unsupported architecture: $(uname -m)"; exit 1 ;; *) log_error "Unsupported architecture: $(uname -m)"; exit 1 ;;
esac esac
} }
@@ -112,14 +114,14 @@ install_or_upgrade_bao() {
return 0 return 0
fi fi
# OpenBao publishes zip archives named bao_<version>_linux_<arch>.zip # Asset naming convention: bao_<version>_Linux_<arch>.tar.gz
url="https://github.com/openbao/openbao/releases/download/${tag}/bao_${version}_linux_${arch}.zip" url="https://github.com/openbao/openbao/releases/download/${tag}/bao_${version}_Linux_${arch}.tar.gz"
log_info "Downloading OpenBao ${tag} (${arch}) from ${url}..." log_info "Downloading OpenBao ${tag} (${arch}) from ${url}..."
tmpdir=$(mktemp -d) tmpdir=$(mktemp -d)
trap 'rm -rf "$tmpdir"' RETURN trap 'rm -rf "$tmpdir"' RETURN
curl -fsSL "$url" -o "${tmpdir}/bao.zip" curl -fsSL "$url" -o "${tmpdir}/bao.tar.gz"
unzip -q -o "${tmpdir}/bao.zip" -d "$tmpdir" tar -xzf "${tmpdir}/bao.tar.gz" -C "$tmpdir"
if [[ ! -f "${tmpdir}/bao" ]]; then if [[ ! -f "${tmpdir}/bao" ]]; then
log_error "Archive did not contain expected 'bao' binary." log_error "Archive did not contain expected 'bao' binary."
@@ -258,7 +260,7 @@ exec_in_lxc() {
local mode="$2" # --install or --update local mode="$2" # --install or --update
# Ensure base tooling exists inside the container before piping the script. # Ensure base tooling exists inside the container before piping the script.
pct exec "$ctid" -- sh -c "apk add --no-cache bash curl jq unzip ca-certificates >/dev/null 2>&1" pct exec "$ctid" -- sh -c "apk add --no-cache bash curl jq ca-certificates >/dev/null 2>&1"
curl -fsSL "$SCRIPT_URL" \ curl -fsSL "$SCRIPT_URL" \
| pct exec "$ctid" -- env \ | pct exec "$ctid" -- env \
SCRIPT_URL="$SCRIPT_URL" \ SCRIPT_URL="$SCRIPT_URL" \
@@ -378,8 +380,7 @@ install_inside_lxc() {
apk upgrade >/dev/null apk upgrade >/dev/null
log_info "Installing dependencies..." log_info "Installing dependencies..."
# gcompat: OpenBao binaries are glibc-built; gcompat is required on musl Alpine. apk add --no-cache bash curl jq ca-certificates gcompat openrc logrotate tailscale >/dev/null
apk add --no-cache bash curl jq unzip ca-certificates gcompat openrc logrotate tailscale >/dev/null
log_info "Enabling tailscaled..." log_info "Enabling tailscaled..."
rc-update add tailscale default >/dev/null 2>&1 || true rc-update add tailscale default >/dev/null 2>&1 || true