OpenBao Playground

Dev mode

OpenBao is configured to run in dev mode by default, meaning:

• Initialized and unsealed - The server will be automatically initialized and unsealed.
• In-memory storage - All data is stored (encrypted) in-memory.
• KV engine enabled at secret/

If you'd prefer to run the service "normally", see the Setup without dev mode section.

For more feature demos, check out the Other playgrounds section.

You can read more about the properties of the dev server here.

Connecting

Connect to OpenBao using the following command:

bao status

The root token for connecting from other clients (e.g., the embedded UIs) is iximiuz.

Configuration

To experiment with custom configurations, place your config files in the following location: /etc/openbao/config.d/

Ensure they're owned by the service user:

chown -R openbao:openbao /etc/openbao/config.d/

Other playgrounds

Other playgrounds showcasing features not available here: coming soon!

Setup without dev mode

If you choose to run the service in "normal" mode (i.e. Dev mode disabled), a few extra steps are needed to replicate the dev mode setup.

These steps are outlined in this tutorial.