Any way to encrypt HA?

[scotrod]

o/ Hey All,

I am running my Home Assistant instance as a VM inside esxi on my home server. I want to know if there is a way that I can encrypt HA’s disk files without doing that on a hypervisor lvl, but rather directly on the OS.

I searched but I couldn’t find anything under the options, and I don’t think an addon should be taking care of this. Perhaps it can be achieved via luks?

Thanks!

[orange-assistant (wisecracker)]

@scotrod

Perhaps it can be achieved via luks?

Not with HaOS AFAIK but if you choose supervised on debian that is certainly possible

[scotrod]

Thanks for the reply. I’ll attempt to make a feature request then. Application of the high rank of HA should have that included IMO.

[scotrod]

Thread:

Integrated full disk encryption

o/ Greetings! Home Assistant OS currently lacks integrated full disk encryption, leaving sensitive data (e.g., credentials, secrets, security cameras footage and logs) exposed if the storage is stolen. Implementation of that kind would align HAOS with best security practices and provide users with an additional layer of protection. This is probably a long short, but it is my personal opinion that a software of the high rank like HA should have that. Thanks!

[orange-assistant (wisecracker)]

@scotrod

encrypt HA’s disk files without doing that on a hypervisor

Why is that? Also if your system hosting the virtual machine does have a encrypted drive then the haos disk file will essentially already be encrypted.

[scotrod]

To encrypt a VM esxi requires vcenter license and a sh*tton of other requirements that are not realistic for home users. I am not aware if this is possible on proxmox without all the headaches, but if it is, I would gladly migrate over.

I also believe that an OS should be able to take care of itself when it comes to data integrity, availability and confidentiality.

[orange-assistant (wisecracker)]

@scotrod

believe that an OS should be able to take care of itself when it comes to data integrity, availability and confidentiality.

HaOS is only JeOS

Just enough operating system

Just enough operating system is a paradigm for customizing operating systems to fit the needs of a particular application such as for a software appliance. The platform only includes the operating system components required to support a particular application and any other third-party components contained in the appliance. This makes the appliance smaller, faster and potentially more secure than an application running under a full general-purpose OS.
Just enough operating system - Wikipedia

If you have the need to have HA encrypted you can easily switch to one of the other 3 (supervisor, docker, python) supported installation methods which all depend on a full OS and should allow you all the shenanigans including full disk encryption.

Installation