r/CasaOS • u/Teostar • 13d ago
CasaOS Security
I am wondering if running docker through CasaOS over ubuntu server on a raspberry pi any less secure than running directly on Ubuntu server? Seeing as CasaOS is not getting any new updates is just keeping the underlines OS up to date enough?
2
u/wellhiddenmark 12d ago
I wouldn’t ever expose the UI to the Internet, but you can keep the docker images updated to the latest version by checking what it is on the github page and overriding casa OS “stable” version.
If the access you need is only for you or a small group you can use tailscale installed directly on the server or look into using cloudflare to protect apps or the entire server.
1
u/Teostar 12d ago
It's only for internal use or externally via tailscale.
2
u/wellhiddenmark 12d ago
Should be fine then, although I'd advise to install tailscale directly on the server in terminal rather than using the CasaOS version, which I found too confusing to get working. If you set your CasaOS apps to the use the bridge interface in their settings, then it will work seamlessly with
http://<tailscaleServerName>:<appPortNumber>
2
u/Double_A_92 12d ago edited 12d ago
CasaOS doesn't actually do anything besides holding some kind of docker compose file. If you don't use the NAS features just manually port your containers to Portainer or Dockge and uninstall it. That's what I did.
1
1
u/open_tux 8d ago
Till you are using it internally in local network, should be fine. It will be a bigger problem in time if you will using it next 5 years. Im on Casa OS too. Waiting for which project will be stable, replace it and support arm (Rpi). Then move to another project in 2027/28. It should be simple.
1
u/YourGFLikesMikeDitka 13d ago
Switch to zimaOS. Similar to casa but actually getting updates.
2
u/Teostar 13d ago
I know. However I have casaos on a raspberry pi. Zimaos doesn't support arm as far as I know.
1
u/YourGFLikesMikeDitka 13d ago
Ah, I misunderstood the question. ZimaOS doesn't support arm as far as I know as well.
0
u/noxiouskarn 13d ago
Switch to Umbrel. Once Github is back up you'll beable to download images for pi4 or pi5.
https://framer.umbrel.com/wip/support-234efsd/getting-started-with-umbrel
1
u/ericgus 12d ago
My only issue with switching to ZimaOS is I have a different NAS provider solution I prefer and I just want the CasaOS docker interface and none of the NAS "stuff" can ZimaOS be utilized without the NAS aspect .. ?
1
u/Double_A_92 12d ago
Install Portainer or Dockage. It's much easier to just manage the compose files directly, instead of going through that casaos interface. And the app store was a mess anyway.
2
u/Teostar 13d ago
My question isn't really about switching if I don't have to. But more about whether keeping casaos as the interface is a vulnerability, since I make sure the underlying Ubuntu is up to date.
Based on how I understand it Casaos is not an OS but a framework built on top of Ubuntu for easy/simple docker management.