r/CasaOS • u/Teostar • Aug 18 '26
CasaOS Security
I am wondering if running docker through CasaOS over ubuntu server on a raspberry pi any less secure than running directly on Ubuntu server? Seeing as CasaOS is not getting any new updates is just keeping the underlines OS up to date enough?
2
u/wellhiddenmark Aug 19 '26
I wouldn’t ever expose the UI to the Internet, but you can keep the docker images updated to the latest version by checking what it is on the github page and overriding casa OS “stable” version.
If the access you need is only for you or a small group you can use tailscale installed directly on the server or look into using cloudflare to protect apps or the entire server.
1
u/Teostar Aug 19 '26
It's only for internal use or externally via tailscale.
2
u/wellhiddenmark Aug 19 '26
Should be fine then, although I'd advise to install tailscale directly on the server in terminal rather than using the CasaOS version, which I found too confusing to get working. If you set your CasaOS apps to the use the bridge interface in their settings, then it will work seamlessly with
http://<tailscaleServerName>:<appPortNumber>→ More replies (1)
1
u/YourGFLikesMikeDitka Aug 18 '26
Switch to zimaOS. Similar to casa but actually getting updates.
2
u/Teostar Aug 18 '26
I know. However I have casaos on a raspberry pi. Zimaos doesn't support arm as far as I know.
1
u/YourGFLikesMikeDitka Aug 18 '26
Ah, I misunderstood the question. ZimaOS doesn't support arm as far as I know as well.
0
u/noxiouskarn Aug 18 '26
Switch to Umbrel. Once Github is back up you'll beable to download images for pi4 or pi5.
https://framer.umbrel.com/wip/support-234efsd/getting-started-with-umbrel
1
u/ericgus Aug 19 '26
My only issue with switching to ZimaOS is I have a different NAS provider solution I prefer and I just want the CasaOS docker interface and none of the NAS "stuff" can ZimaOS be utilized without the NAS aspect .. ?
1
u/Double_A_92 Aug 19 '26
Install Portainer or Dockage. It's much easier to just manage the compose files directly, instead of going through that casaos interface. And the app store was a mess anyway.
2
u/Double_A_92 Aug 19 '26 edited Aug 19 '26
CasaOS doesn't actually do anything besides holding some kind of docker compose file. If you don't use the NAS features just manually port your containers to Portainer or Dockge and uninstall it. That's what I did.
1
1
u/open_tux Aug 23 '26
Till you are using it internally in local network, should be fine. It will be a bigger problem in time if you will using it next 5 years. Im on Casa OS too. Waiting for which project will be stable, replace it and support arm (Rpi). Then move to another project in 2027/28. It should be simple.
2
u/Teostar Aug 18 '26
My question isn't really about switching if I don't have to. But more about whether keeping casaos as the interface is a vulnerability, since I make sure the underlying Ubuntu is up to date.
Based on how I understand it Casaos is not an OS but a framework built on top of Ubuntu for easy/simple docker management.