[BACKPORT 24.11] openbao: init at 2.2.0

pkgs/by-name/op/openbao/package.nix

@@ -0,0 +1,74 @@
+{
+  lib,
+  fetchFromGitHub,
+  buildGo124Module,
+  testers,
+  openbao,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+buildGo124Module rec {
+  pname = "openbao";
+  version = "2.2.0";
+
+  src = fetchFromGitHub {
+    owner = "openbao";
+    repo = "openbao";
+    tag = "v${version}";
+    hash = "sha256-dDMOeAceMaSrF7P4JZ2MKy6zDa10LxCQKkKwu/Q3kOU=";
+  };
+
+  vendorHash = "sha256-zcMc63B/jTUykPfRKvea27xRxjOV+zytaxKOEQAUz1Q=";
+
+  proxyVendor = true;
+
+  subPackages = [ "." ];
+
+  tags = [
+    "openbao"
+    "bao"
+  ];
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X github.com/openbao/openbao/version.GitCommit=${src.rev}"
+    "-X github.com/openbao/openbao/version.fullVersion=${version}"
+  ];
+
+  postInstall = ''
+    mv $out/bin/openbao $out/bin/bao
+  '';
+
+  # TODO: Enable the NixOS tests after adding OpenBao as a NixOS service in an upcoming PR and
+  # adding NixOS tests
+  #
+  # passthru.tests = { inherit (nixosTests) vault vault-postgresql vault-dev vault-agent; };
+
+  passthru.tests.version = testers.testVersion {
+    package = openbao;
+    command = "HOME=$(mktemp -d) bao --version";
+    version = "v${version}";
+  };
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgram = "${placeholder "out"}/bin/bao";
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    homepage = "https://www.openbao.org/";
+    description = "Open source, community-driven fork of Vault managed by the Linux Foundation";
+    changelog = "https://github.com/openbao/openbao/blob/v${version}/CHANGELOG.md";
+    license = lib.licenses.mpl20;
+    mainProgram = "bao";
+    maintainers = with lib.maintainers; [ ];
+  };
+}