rockcraft.yaml

name: vault
base: bare
build-base: ubuntu@24.04
version: "1.17.6"
summary: A ROCK container image for Vault
description: |
  A ROCK container image for Vault, a tool for secrets management, encryption as a service, and privileged access management.
license: Apache-2.0
platforms:
  amd64:
  arm64:

services:
  vault:
    command: vault server -config=/vault/config/config.hcl
    override: replace
    startup: enabled

package-repositories:
 - type: apt
   url: https://deb.nodesource.com/node_20.x
   components: [main]
   suites: [focal]
   key-id: 9FD3B784BC1C6FC31A8A0A1C1655A0AB68576280
 - type: apt
   url: https://dl.yarnpkg.com/debian/
   components: [main]
   suites: [stable]
   key-id: 72ECF46A56B4AD39C907BBB71646B01B86E50310

parts:

  vault:
    plugin: go
    go-buildtags:
      - vault
      - ui
    source: https://github.com/hashicorp/vault.git
    source-tag: v1.17.6
    source-type: git
    source-depth: 1
    stage:
      - bin/vault
    build-snaps:
      - go/1.22/stable
    build-packages:
      - nodejs
      - yarn
    override-build: |
      make static-dist
      craftctl default
      strip -s $CRAFT_PART_INSTALL/bin/*

  default-config:
    plugin: dump
    source: ./config
    organize:
      config.hcl: /vault/config/config.hcl

  packages:
    plugin: nil
    stage-packages:
      - ca-certificates_data
      - libc6_libs
      - base-files_lib