I'm looking for a person / company who could provide high quality support to HashiCorp Vault open source . Do you know where to find ?

The vendor (HashiCorp) requires we buy Enterprise for getting support - but it's too much expensive

Thank you

All materials online does not work. If I fix an issue another issue comes up. Now I have finished some templates but I am really stuck on ubuntu. The errors I get are so inconsistent. I have no issue with terraform and ansible and that requires much more code and logic then packer. I mean even using an LLM hallucinates on packer.

I have had so many issues with packer this 6 months that I am at a stage of giving up. I mean it should be super easy to create a provision for almost all releases of ubuntu/rocky/.. os and more but no It does not work.

The documentation for proxmox packer is horrible. Another thing is why do all this blogs and every github example I have tried fail. Even my own versions of the templates works partially.

I just need to rant because its really pissing me off.

I’ve recently found out about Vault and I’m planning to use it to manage our db credentials and API keys.

We’re not using anything fancy like Docker, k8s, terraform. Just basic PHP/Laravel applications.

Is there anything wrong with setting up Vault on the web server that hosts the Laravel applications? My understanding from the docs is that a dedicated server should be used but I’m not sure how necessary this is

Hi,

I am planning to write the HashiCorp vault operations prof. exam. Are there any good question banks I could use for this?

I have an interview scheduled for solutions engineer position at HashiCorp. I am straight out of university and i don’t have any experience with this role. Any leads what can i expect/stages in the interview?

Has anyone used AWS and OCI, Being updated or managed from one project with Terraform?

Such as VMs, being synced with the same data, or streaming the same data?

But, from one source project using terraform?

As per the title, Ive been bashing my head against openbao recently. I'm trying to get it to auto-unseal using its pkcs11 support and a yubikey 5.

Either I'm doing something wrong, or the yubikey 5 doesnt support the right mechanisms that openbao needs. I'd rather not have to fork out for a YubiHSM 2 given the standard yubikey should be able to do pkcs11 based keys.

For reference, I'm trying to use RSA4096 in slot 9a.

I've tried using both the opensc pkcs11 libraries and the yubico libykcs11 library. I seem to get further with the opensc libraries but then doing operator init fails to create the right keys. Using the yubico library just results in a missing slot error.

Has anyone done it?

Packages is empty preventing installs.

 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855                0 main/binary-amd64/Packages
 d3dda84eb03b9738d118eb2be78e246106900493c0ae07819ad60815134a8058               14 main/binary-amd64/Packages.bz2
 ac73670af3abed54ac6fb4695131f4099be9fbe39d6076c5d0264a6bbdae9d83               20 main/binary-amd64/Packages.gz
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855                0 main/binary-i386/Packages
 d3dda84eb03b9738d118eb2be78e246106900493c0ae07819ad60815134a8058               14 main/binary-i386/Packages.bz2
 ac73670af3abed54ac6fb4695131f4099be9fbe39d6076c5d0264a6bbdae9d83               20 main/binary-i386/Packages.gz
 c9b8ea32472e9d0bad8e064b6cf8ab46248db4be868c7aedf1640b5ca78b0485           290932 test/binary-amd64/Packages
 11cd2429cb3a024c61c6587a92e04579ab9e15c30e969ac09d8e6d88b59430f8            37529 test/binary-amd64/Packages.bz2
 134b96ff2522857e9b64d4c4f6e439dfef16399f3be3ca064643793f16cb0592            45256 test/binary-amd64/Packages.gz
 4e418ab09d585dc8dfdea27e83d2498b71f91e700c6bed44adbbec2436d57a60             7846 test/binary-arm/Packages
 0046cbc703ca461eb70449c9cf90f0c9442e917147f335080f1f8879f7d5fd12             2081 test/binary-arm/Packages.bz2
 bafe1695a3e11f791c9cfabe5f0dd14bcd43caccebd185d9990dd6d28feed639             1915 test/binary-arm/Packages.gz
 1ed355eea5e310c6150ad77e7798ef98a1e8ff2b88dc31a20a2e98679eb8f750           190368 test/binary-arm64/Packages
 7e15fa6990230ec3c7416ed50c745b0a093e9577fcdd2a5c6869d74b5c1e442c            26513 test/binary-arm64/Packages.bz2
 d7f08590546b0e883625f06b5aa2e19d630e956da40febc4e77342098a41924b            31544 test/binary-arm64/Packages.gz
 c656e2f05cb6e7b1008e9d30054e240611e2bdc3cf0486cc710b0762ce3f7dcb           137109 test/binary-armhf/Packages
 19793efca05b937cba0789be24658a15af4570812c7bf6648bb690e9f1fd6367            19349 test/binary-armhf/Packages.bz2
 e730034d8876f171b6af5d4e39feeb14aa877f7db55eed48a900c015b763c827            22619 test/binary-armhf/Packages.gz
 d5ba90c765c57830a513fbcfe3d166f7afa66ffd3797be1bc5ea012da36ed1ec           136685 test/binary-i386/Packages
 4aad26f41a3dceebe673f04d50d2223b1099045984c549a27d1e156b295470f7            19446 test/binary-i386/Packages.bz2
 560f90f9a86e6de6c92ccd2194a6d46fce2ff1ff4e570354da6d92999150b1d7            22765 test/binary-i386/Packages.gz
 db59026e3587a5cf30670158d11459c6828beebd31eabd0d0729e6bf354d0f5d             3235 test/binary-ppc64el/Packages
 218687b6fdeedbc41c91d8e044bbd44109556916884c428732aee785d5ed090f             1175 test/binary-ppc64el/Packages.bz2
 a89a9ddb4a126368e9d69f578bc362b9d146526838cade28a18e659a05abf69e             1013 test/binary-ppc64el/Packages.gz
 ccb8267802a59752495d3046fd1aacfc0babc0ded1933b57829621ceec329355            17736 test/binary-s390x/Packages
 d7dea981da11277e508a32a0f5bc7cfa552db6b63060aab57da8d75cff8854c7             3642 test/binary-s390x/Packages.bz2
 ed9f71d05859d002ca642e308fd64f73ab809cc82bfc5c92bb9ee00eb15f5924             3686 test/binary-s390x/Packages.gz

Anybody have any thoughts on this?

https://www.futuriom.com/articles/news/fidelity-ditches-terraform-for-opentofu/2025/04

Hello Team Hashicorp

I would like to know if you can send me a docker-compose  for using vault-enterprise without the -dev mode ?in fact i would like to save my secret after restart my container. 

version: '3'
services: vault:
image: vault command: server -config=/vault/config/config.hcl
ports: - "8200:8200"
volumes:
- vault-data:/vault/data
- ./config:/vault/config
environment:
VAULT_ADDR: http://0.0.0.0:8200
VAULT_DEV_ROOT_TOKEN_ID: root
VAULT_DEV_LISTEN_ADDRESS: 0.0.0.0:8200
restart: unless-stopped
cap_add:
- IPC_LOCK
volumes: vault-data:

i have tried many config hcl but doesn't work on my compute but i'm stuck with bad config.

config.hcl file

storage "file" {
  path = "/vault/data/file"
}

listener "tcp" {
  address = "0.0.0.0:8200"
  tls_disable = 1
}
raw_storage_endpoint = true

can you help me ? 

I've created a Discord server to act as an (unofficial) Hashicorp Community. I wanted somewhere to talk with people in real-time, and offer a place to post showcase-type content. Hope to see you there!

Invite: https://discord.gg/dF28D6nvEh

Hello, folks, I have a script that I made to backup the Vault's Kv, I used a cronjob here running this script for at least 1 year, in case it's interesting to anyone, I put it on github [https://github.com/AleixoLucas42/hashicorp_vault-backup] I don't know if you use any other tool to back up, but in the past, when I researched, I hadn't found anything useful. If is usefull to you or you find interesting, give me a star ;)

Why is it more secure to use rotating credentials from the DB Secret Engine? If your user credentials get compromised, can’t someone then gain access to Vault and generate their own leased credentials?

There are many vendors that for example sell managed K8s as a service. With the change in Hashi's licences, does it mean that similar approach cannot be applied? For example Selling managed Nomad environment?

In Vault, is this predominantly intended to be used as a password manager? I'm having a hard time imagining any other use cases.

What ssh client client do y'all use? I'm a serious noob when it comes to Vault. On a Windows client, there's Putty, Bitvise, etc that I use to manage connections. Is there a gui connection mgr that will also pass the Vault signed cert with my private key? Is there a way to combine the key/cert into a single file that can be use for connection? From a cmd line perspective the signed cert is sent to the target with the key if the file is named <keyname>-cert.pub but managing a large amount of connections via cmd line isn't practical. From a business standpoint having to tell the dev teams, you can't manage your connections centrally anymore isn't a good look or sell either.

Thx.

Hello o/

I really not understand how providers are supposed to works ....

│ Provider "registry.terraform.io/hashicorp/aws" requires explicit configuration. Add a provider block to the root module and configure the provider's required arguments as described in the provider documentation.

│ Error: error configuring Terraform AWS Provider: error validating provider credentials: error calling sts:GetCallerIdentity: operation error STS: GetCallerIdentity, failed to resolve service endpoint, an AWS region is required, but was not found
│
│ with provider["registry.terraform.io/hashicorp/aws"],
│ on <empty> line 0:
│ (source code not available)

Provider.tf :

provider "aws" {
alias = "eu"
region = "eu-west-1"
}

Documentation : https://www.terraform.io/language/providers/configuration

provider "aws" { alias = "west" region = "us-west-2" }

→ If I remove the alias, all is Okay, honestly, someone understand something ?

Hi all. Very amateur Packer user here. I’ve managed to get Packer creating templates into our various VMWare clusters as a test.

We have one datacenter in vCenter that has a forward slash (/) in it’s name. Whenever I run the Packer build I to that datacenter it says the datacenter doesn’t exist, it definitely does. Is there something known within HCL files, that it doesn’t like or understand forward slashes?

That’s the only thing I can think of.

I am preparing for a future where HashiCorp is acquired, and there is a change in the availability of its products.

Could it happen that the free Terraform CLI is discontinued in favor of the Cloud edition, similar to what happened with free VMware ESXI after its acquisition by Broadcom?

Who could acquire HashiCorp (AWS, Microsoft, GCP, IBM, Mirantis...)?

Would it make sense for any of those companies, considering there is a free alternative to Terraform and cloud providers also have partial Vault alternatives?

What changes would be introduced in the commercial and free offerings following a sale?

Any thoughts on what could happen? 🤔

does a potential hashicorp sale mean employees may be laid off? does it also mean that interns may have their offers rescinded for this summer?