PORTNAME=	openbao

PORTVERSION=	2.0.0

DISTVERSIONPREFIX=	v

CATEGORIES=	security

MAINTAINER=	jake@metalrip.com

COMMENT=	Tool for securely accessing secrets

WWW=		https://openbao.org/

LICENSE=	MPL20

LICENSE_FILE=	${WRKSRC}/LICENSE

GO=		go

BIN_NAME=	bao

# USES=		go:modules

USE_GITHUB=	yes

GITID= 		700fe3f27ab1f0ec39ce20c36f6d9d97c9fe6ac3

# GO_MODULE=	github.com/openbao/openbao

GO_BUILDFLAGS=	-ldflags="\

		-s \

		-X github.com/openbao/openbao/version.GitCommit=${GITID} \

		-X github.com/openbao/openbao/version.BuildDate=${SOURCE_DATE_EPOCH} \

		-X github.com/openbao/openbao/version.fullVersion=${PORTVERSION}"

USE_RC_SUBR=	openbao

SUB_FILES=	pkg-message

SUB_LIST=       GROUP=${GROUPS} USER=${USERS}

USERS=          ${PORTNAME}

GROUPS=         ${PORTNAME}

PLIST_FILES=	bin/${BIN_NAME}

GO_TARGET=	:${BIN_NAME}

do-build:

	@cd ${WRKSRC} && ${GO} mod tidy && ${GO} mod vendor

	@cd ${WRKSRC} && ${GO} build ${GO_BUILDFLAGS} -o bin/${BIN_NAME}

do-install:

	@echo "Installing ${PORTNAME} as ${BIN_NAME}"

	${MKDIR} ${STAGEDIR}${PREFIX}/bin

	${INSTALL_PROGRAM} ${WRKSRC}/bin/${BIN_NAME} ${STAGEDIR}${PREFIX}/bin/${BIN_NAME}

.include <bsd.port.mk>

TIMESTAMP = 1725068853

SHA256 (v2.0.0.zip) = aeb3cc3f74f8e09fd6b1ba920d62c5624a40b5926c947b2b2b495fe03b144064

SIZE (v2.0.0.zip) = 18291759

SHA256 (openbao-openbao-v2.0.0_GH0.tar.gz) = 0dcb7e7218890fdccd3b10205b93b96a186c4c3bc34b1fb328604d7ed6621ac4

SIZE (openbao-openbao-v2.0.0_GH0.tar.gz) = 15757091

#!/bin/sh

# PROVIDE: openbao

# REQUIRE: DAEMON

# KEYWORD: shutdown

#

# Add the following lines to /etc/rc.conf.local or /etc/rc.conf

# to enable this service:

#

# openbao_enable (bool):	Set it to YES to enable openbao.

#			Default is "NO".

# openbao_user (user):	Set user to run openbao.

#			Default is "openbao".

# openbao_group (group):	Set group to run openbao.

#			Default is "openbao".

# openbao_config (file):	Set openbao config file.

#			Default is "%%PREFIX%%/etc/openbao.hcl".

# openbao_syslog_output_enable (bool):	Set to enable syslog output.

#					Default is "NO". See daemon(8).

# openbao_syslog_output_priority (str):	Set syslog priority if syslog enabled.

#					Default is "info". See daemon(8).

# openbao_syslog_output_facility (str):	Set syslog facility if syslog enabled.

#					Default is "daemon". See daemon(8).

# openbao_limits_mlock (size): allowd memorylocked value in size. Default is 1024M

. /etc/rc.subr

name=openbao

rcvar=openbao_enable

load_rc_config $name

: ${openbao_enable:="NO"}

: ${openbao_user:="openbao"}

: ${openbao_group:="openbao"}

: ${openbao_config:="%%PREFIX%%/etc/openbao.hcl"}

: ${openbao_limits_mlock:="1024M"}

: ${openbao_limits:="-l ${openbao_limits_mlock}"}

DAEMON=$(/usr/sbin/daemon 2>&1 | grep -q syslog ; echo $?)

if [ ${DAEMON} -eq 0 ]; then

        : ${openbao_syslog_output_enable:="NO"}

        : ${openbao_syslog_output_priority:="info"}

        : ${openbao_syslog_output_facility:="daemon"}

        if checkyesno openbao_syslog_output_enable; then

                openbao_syslog_output_flags="-T ${name}"

                if [ -n "${openbao_syslog_output_priority}" ]; then

                        openbao_syslog_output_flags="${openbao_syslog_output_flags} -s ${openbao_syslog_output_priority}"

                fi

                if [ -n "${openbao_syslog_output_facility}" ]; then

                        openbao_syslog_output_flags="${openbao_syslog_output_flags} -l ${openbao_syslog_output_facility}"

                fi

        fi

else

        openbao_syslog_output_enable="NO"

        openbao_syslog_output_flags=""

fi

pidfile=/var/run/openbao.pid

procname="%%PREFIX%%/bin/bao"

command="/usr/sbin/daemon"

command_args="-f -t ${name} ${openbao_syslog_output_flags} -p ${pidfile} /usr/bin/env ${openbao_env} ${procname} server -config=${openbao_config}"

extra_commands="reload monitor"

monitor_cmd=openbao_monitor

start_precmd=openbao_startprecmd

required_files="$openbao_config"

openbao_monitor()

{

	sig_reload=USR1

	run_rc_command "reload"

}

openbao_startprecmd()

{

        if [ ! -e ${pidfile} ]; then

                install -o ${openbao_user} -g ${openbao_group} /dev/null ${pidfile};

        fi

        if [ ! -d ${openbao_dir} ]; then

                install -d -o ${openbao_user} -g ${openbao_group} ${openbao_dir}

        fi

}

run_rc_command "$1"

[

{ type: install

  message: <<EOM

The bao user created by the bao package is now a member of the daemon

class, which will allow it to use mlock() when started by the rc script. This

will not be reflected in systems where the user already exists. Please add the

bao user to the daemon class manually by running:

pw usermod -L daemon -n openbao

or delete the user and reinstall the package.

You may also need to increase memorylocked for the daemon class in

/etc/rc.conf to more than 1024M (the default) or more:

openbao_limits_mlock="2048M"

Or to disable mlock, add:

disable_mlock = 1

to %%PREFIX%%/etc/openbao.hcl

EOM

}

]