Start9 Review from Experts? EmbassyOS

Privacy Questions
4

You know what work well though, Fedora or Ubuntu, and there is no reason they can’t be used on a NAS. They have good support and will fit almost any usecase. I find with a lot of “niche” distros like “gaming distros” or “nas distros” they’ve got a very specific usecase.

That Start9 website seems like a lot of glossy bullshit to say “run your own server for some things oh and did you know you can run a bitcoin node”.

Packaging a service for StartOS is a challenging, exciting, creative, and rewarding experience.

blah blah blah so basically Docker, that’s what the screenshot next it it is of a Dockerfile.

A distribution with Docker pre-installed cool. These distributions also tend to have weaker security than main ones, particularly in regard to mandatory access control systems.

You know what they could have done? Made an ostree image with https://universal-blue.org/ and leveraged Redhat awesomeness.

Re CasaOS, any project that starts with curl -fsSL https://some url sudo bash instantly loses credibility with me.

You don’t know what on earth is being pulled down, and there is no digital signature checking.

What I did find interesting is you get a special version if you live in China:

Get_Download_Url_Domain() {
    # Use ipconfig.io/country and https://ifconfig.io/country_code to get the country code
    REGION=$(${sudo_cmd} curl --connect-timeout 2 -s ipconfig.io/country || echo "")
    if [ "${REGION}" = "" ]; then
       REGION=$(${sudo_cmd} curl --connect-timeout 2 -s https://ifconfig.io/country_code || echo "")
    fi
    if [[ "${REGION}" = "China" ]] || [[ "${REGION}" = "CN" ]]; then
        CASA_DOWNLOAD_DOMAIN="https://casaos.oss-cn-shanghai.aliyuncs.com/"
    fi
}

Otherwise it comes from Github. All in all looks super sketchy and I have no intention of trying it. Also note, these “docker” GUIs generally require exposing your docket socket to the container which is just dangerous and bad for security.

7 Likes