You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The initial root token and unseal key are written to /etc/openbao/openbao.env (Debian) or /etc/conf.d/openbao (Alpine).
OpenBao is unsealed automatically on every boot, reading the unseal key from that same file. To unseal manually instead, remove the BAO_UNSEAL_KEY line and delete /etc/systemd/system/openbao.service.d/unseal.conf (Debian) or the start_post block in /etc/init.d/openbao (Alpine).
Note: This is not in the official repo yet—it's just a dev version! After merging into ProxmoxVE, it will need to be recreated.
Activity
github-actions commentedon Jul 29, 2026
The OpenBao script is ready for testing:
The initial root token and unseal key are written to /etc/openbao/openbao.env (Debian) or /etc/conf.d/openbao (Alpine).
OpenBao is unsealed automatically on every boot, reading the unseal key from that same file. To unseal manually instead, remove the BAO_UNSEAL_KEY line and delete /etc/systemd/system/openbao.service.d/unseal.conf (Debian) or the start_post block in /etc/init.d/openbao (Alpine).
Note: This is not in the official repo yet—it's just a dev version! After merging into ProxmoxVE, it will need to be recreated.
Discord testing thread: https://discord.com/channels/1302816934508630047/1531994121185656847
github-actions commentedon Aug 29, 2026
A PR has been created for openbao: community-scripts/ProxmoxVE#16872
michelroegl-brunner commentedon Aug 30, 2026
Merged with #16872 in ProxmoxVE