6 ms·

CasaOS – A simple, easy-to-use, elegant open-source home cloud system

29 points by jacooper 4y ago

solarkraft 4y ago
Maybe you shouldn't use the word cloud for something that works locally and respects your privacy.
- firesteelrain 4y ago
  This is just a private Cloud type platform. Private Clouds are perfectly normal.
  - paulryanrogers 4y ago
    Really? Cloud implies it's ephemeral, typically by outsourcing to someone else.
    - xwowsersx 4y ago
      I'm not sure about that. Cloud can involve virtualized resources that can be provisioned or deprovisioned dynamically based on demand but, it doesn't necessarily imply that the software / data in the cloud is ephemeral. Both can be designed to be persistent and durable, with long-term storage and retention. I think you're confusing an accident for an essence.
    - firesteelrain 4y ago
      No, that is wrong. Have you ever heard of Azure Stack Hub? It’s an Edge Cloud. You manage it yourself
    - kjs3 4y ago
      Having just gone through certifications for 2 of the 3 big providers, the people who are known for providing cloud services think private clouds are a thing.
LoganDark 4y ago
sudo bash? really?
- jacooper 4y ago
  Yes the easiest method for beginners You are free not to use it.
  - remram 4y ago
    How? There isn't any other installation documentation. In fact it doesn't look like there is any documentation at all.
    - LoganDark 4y ago
      my first guess would normally be to look at the shell script[0] and follow along, but it looks like it's not super easy to follow. It's also not very easy to audit, for that matter. I do see it using its root privileges to force-install packages without prompting (it uses `apt-get` rather than `apt`—why?), and it's completely unclear that I'd be consenting to this. Actually, the reason why I don't execute arbitrary code on my machine as root is because it's impossible not to consent to having packages force-installed without prompt. So the shell script installer grants this app a hard pass for me. [0]: http://get.casaos.io/ http://get.casaos.io/
      - jasonvorhe 4y ago
        apt is asking you not to use apt in scripts because it doesn't yet have a stable cli interface yet.
        LoganDark 4y ago
        > apt is asking you not to use apt in scripts because it doesn't yet have a stable cli interface yet. Oh, nice catch
  - LoganDark 4y ago
remram 4y ago
I don't understand what it is. Does it run VMs? Does it run apps specifically packaged for it? I also love the "featured in Hackernews". This post has 9 points as I'm writing this.
- jasonvorhe 4y ago
  It doesn't run VMs because it clearly says that it's running Docker containers. It's also been posted to HN a year a go.
  - remram 4y ago
    Didn't quick Ctrl+F, neither the landing page not the GitHub README mentions the word "container" once. Is that what a "cloud" is? Runs containers? Is that obvious?
29athrowaway 4y ago
Headquartered in the PRC Interesting, but no, thanks!
- replwoacause 4y ago
  Yeah I noticed that too. Sorry but no way I'm installing this given that.
- jasonvorhe 4y ago
  Looks like the company running this is simply located in a co-working space in China. Didn't know that just living in China made you a possible PRC asset.
  - mthoms 4y ago
    All Chinese companies are possible PRC assets: https://www.cnbc.com/2019/03/05/huawei-would-have-to-give-data-to-china-government-if-asked-experts.html https://www.cnbc.com/2019/03/05/huawei-would-have-to-give-da... Note - I'm not commenting about whether these guys are PRC assets or not. Or whether there is anything nefarious going on at all. I'm just pointing out that they could be compelled to become assets, even if that's against their wishes.
    - dancemethis 4y ago
      I mean, and all US companies are possible NSA/CIA assets. Which is kinda worse because it was already proven more than once. Snowden and PRISM, anyone?
      - mthoms 4y ago
        Kinda worse? That's highly debatable. It's just a different risk profile. I personally don't expect the US government to take an interest in my activities, but I'm not as convinced about the Chinese for various reasons. More to your point, as far as I'm aware, individuals can't be forced under law to cooperate with US intelligence. In China, individuals have to cooperate - by law - and the penalties for non-compliance are harsh. In the case of an open source project maintained by individuals, that's an important consideration.
regularjack 4y ago
I think I just shut down the machine for demo.casaos.io. Sorry, I didn't realize the "Shutdown" button would actually shut it down for everyone...
- white_dragon88 4y ago
  [dead]
deceptionatd 4y ago
I _was_ going to take a look, but the trendy page design is effectively unreadable on mobile... just FYI.
- dolmen 4y ago
  Also references JQuery.

29 points by jacooper 4y ago

solarkraft 4y ago

Maybe you shouldn't use the word cloud for something that works locally and respects your privacy.

firesteelrain 4y ago
This is just a private Cloud type platform. Private Clouds are perfectly normal.
- paulryanrogers 4y ago
  Really? Cloud implies it's ephemeral, typically by outsourcing to someone else.
  - xwowsersx 4y ago
    I'm not sure about that. Cloud can involve virtualized resources that can be provisioned or deprovisioned dynamically based on demand but, it doesn't necessarily imply that the software / data in the cloud is ephemeral. Both can be designed to be persistent and durable, with long-term storage and retention. I think you're confusing an accident for an essence.
  - firesteelrain 4y ago
    No, that is wrong. Have you ever heard of Azure Stack Hub? It’s an Edge Cloud. You manage it yourself
  - kjs3 4y ago
    Having just gone through certifications for 2 of the 3 big providers, the people who are known for providing cloud services think private clouds are a thing.

LoganDark 4y ago

sudo bash? really?

jacooper 4y ago
Yes the easiest method for beginners You are free not to use it.
- remram 4y ago
  How? There isn't any other installation documentation. In fact it doesn't look like there is any documentation at all.
  - LoganDark 4y ago
    my first guess would normally be to look at the shell script[0] and follow along, but it looks like it's not super easy to follow. It's also not very easy to audit, for that matter. I do see it using its root privileges to force-install packages without prompting (it uses `apt-get` rather than `apt`—why?), and it's completely unclear that I'd be consenting to this. Actually, the reason why I don't execute arbitrary code on my machine as root is because it's impossible not to consent to having packages force-installed without prompt. So the shell script installer grants this app a hard pass for me. [0]: http://get.casaos.io/ http://get.casaos.io/
    - jasonvorhe 4y ago
      apt is asking you not to use apt in scripts because it doesn't yet have a stable cli interface yet.
      - LoganDark 4y ago
        > apt is asking you not to use apt in scripts because it doesn't yet have a stable cli interface yet. Oh, nice catch
- LoganDark 4y ago

remram 4y ago

I don't understand what it is. Does it run VMs? Does it run apps specifically packaged for it? I also love the "featured in Hackernews". This post has 9 points as I'm writing this.

jasonvorhe 4y ago
It doesn't run VMs because it clearly says that it's running Docker containers. It's also been posted to HN a year a go.
- remram 4y ago
  Didn't quick Ctrl+F, neither the landing page not the GitHub README mentions the word "container" once. Is that what a "cloud" is? Runs containers? Is that obvious?

29athrowaway 4y ago

Headquartered in the PRC Interesting, but no, thanks!

replwoacause 4y ago
Yeah I noticed that too. Sorry but no way I'm installing this given that.
jasonvorhe 4y ago
Looks like the company running this is simply located in a co-working space in China. Didn't know that just living in China made you a possible PRC asset.
- mthoms 4y ago
  All Chinese companies are possible PRC assets: https://www.cnbc.com/2019/03/05/huawei-would-have-to-give-data-to-china-government-if-asked-experts.html https://www.cnbc.com/2019/03/05/huawei-would-have-to-give-da... Note - I'm not commenting about whether these guys are PRC assets or not. Or whether there is anything nefarious going on at all. I'm just pointing out that they could be compelled to become assets, even if that's against their wishes.
  - dancemethis 4y ago
    I mean, and all US companies are possible NSA/CIA assets. Which is kinda worse because it was already proven more than once. Snowden and PRISM, anyone?
    - mthoms 4y ago
      Kinda worse? That's highly debatable. It's just a different risk profile. I personally don't expect the US government to take an interest in my activities, but I'm not as convinced about the Chinese for various reasons. More to your point, as far as I'm aware, individuals can't be forced under law to cooperate with US intelligence. In China, individuals have to cooperate - by law - and the penalties for non-compliance are harsh. In the case of an open source project maintained by individuals, that's an important consideration.

regularjack 4y ago

I think I just shut down the machine for demo.casaos.io. Sorry, I didn't realize the "Shutdown" button would actually shut it down for everyone...

white_dragon88 4y ago
[dead]

deceptionatd 4y ago

I _was_ going to take a look, but the trendy page design is effectively unreadable on mobile... just FYI.

dolmen 4y ago
Also references JQuery.