[ale] Home Assistant / Docker / Network Security

[Raj Wurttemberg]

I have run Home Assistant (HA) for about two years now. I run it on a
Raspberry Pi but not in a container. I installed HA directly on Raspbian and
have not really had any issues. 

I have my HA monitoring my outside gates, the doors & windows and
controlling several lights. I'm using Z-Wave for everything.

/Raj

-----Original Message-----
From: Ale <ale-bounces at ale.org> On Behalf Of Derek Atkins via Ale
Sent: Tuesday, July 24, 2018 10:22 AM
To: ale at ale.org
Subject: [ale] Home Assistant / Docker / Network Security

Hi,

I'm looking to install Home Assistant to integrate a bunch of various home
automation tasks (this is a longer-term project, but I'm looking to start
experimenting early).  Unfortunately I found [0] which seems to imply that
there is at least one (if not more) serious security flaws in HA.

My plan was to set up Hass.io in a Fedora VM on oVirt.  I was NOT planning
to enable/turn on SAMBA (Eww) -- but it does appear there may be some other
security issue.  I suppose I don't HAVE to use Hass.io -- I could
theoretically run HA directly on the Fedora VM and manually install the
AddOns -- and I could do this for final deployment -- but I was thinking
about Hass.io at least for my initial experimentation.

However, Hass.io is released as a docker instance -- and I've never run
docker.  I can take this as yet another learning experience, of course.
But finding someone more knowledgeable would be a good first step.

So...  Anyone run HA?  Hass.io?  Docker?   And have insights to provide?

Thanks,

-derek