Server log

May 29 10:51:24 zonegrey vault[2047948]: ==> Vault server configuration:
May 29 10:51:24 zonegrey vault[2047948]: Api Address: http://127.0.0.1:8200
May 29 10:51:24 zonegrey vault[2047948]: Cgo: disabled
May 29 10:51:24 zonegrey vault[2047948]: Cluster Address: https://127.0.0.1:8201
May 29 10:51:24 zonegrey vault[2047948]: Environment Variables: GODEBUG, HOME, INVOCATION_ID, JOURNAL_STREAM, LANG, LOGNAME, NOTIFY_SOCKET, PATH, USER
May 29 10:51:24 zonegrey vault[2047948]: Go Version: go1.20.3
May 29 10:51:24 zonegrey vault[2047948]: Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_size: "33554432", tls: "enabled")
May 29 10:51:24 zonegrey vault[2047948]: Log Level:
May 29 10:51:24 zonegrey vault[2047948]: Mlock: supported: true, enabled: false
May 29 10:51:24 zonegrey vault[2047948]: Recovery Mode: false
May 29 10:51:24 zonegrey vault[2047948]: Storage: raft (HA available)
May 29 10:51:24 zonegrey vault[2047948]: Version: Vault v1.13.2, built 2023-04-25T13:02:50Z
May 29 10:51:24 zonegrey vault[2047948]: Version Sha: b9b773f1628260423e6cc9745531fd903cae853f
May 29 10:51:24 zonegrey vault[2047948]: ==> Vault server started! Log data will stream in below:
May 29 10:51:24 zonegrey vault[2047948]: 2023-05-29T10:51:24.856Z [INFO] proxy environment: http_proxy="" https_proxy="" no_proxy=""
May 29 10:51:24 zonegrey vault[2047948]: 2023-05-29T10:51:24.876Z [INFO] core: Initializing version history cache for core
May 29 10:51:24 zonegrey systemd[1]: Started "HashiCorp Vault - A tool for managing secrets".

Vault client

$ vault status
Key                Value
---                -----
Seal Type          shamir
Initialized        false
Sealed             true
Total Shares       0
Threshold          0
Unseal Progress    0/0
Unseal Nonce       n/a
Version            1.13.2
Build Date         2023-04-25T13:02:50Z
Storage Type       raft
HA Enabled         true

Currently in a train, so I'll bootstrap it later when I can have more privacy.

Operator keys will be stored in Complector Vault.

Unseal helper

A script will be prepared to be run from the nasqueron.drake private network by Operations SIG members to ask Complector for keys and use them on eglide:

Could be as simple as vault kv ... | ssh eglide.org vault operator init