I really like the look of this but in light of recent events I have a naĂŻve question.
Does this add-on inherently have more, less or the same security as using the Samba add-on?
I donât mean in the way @frenck has written it, I am in no way questioning anyoneâs skills, knowledge or the implementation of the add-on, I simply mean are there any inherent differences security wise with the methodology employed?
There are no such things as more or less the same security. Any system or program can be compromised when a vulnerability has been found. So yeah⊠there is no answer to that question.
Use SSL and use the password protection offered by this add-on, if you decide to make it available outside of your network (which you generally should avoid as much as possible for anything! so that is not perse related to this addon). The password protection offered by this add-on is provided by NGinx, which is a well-known web server that handles it. Since this project is so major, the chances for having it issues is far less. Nevertheless, new issues could be found.
As for my add-ons, they are all monitored actively by my friends at anchore.io. They know exactly what software is used in the add-on containers and monitor security feeds. As soon as a vulnerability is discovered, they will notify me immediately.
@frenck Thankyou for such a well put reply to what I suppose could have been taken as a provocative question (which it certainly wasnât meant to be).
When I hit the install button in the app store, the button turns red then fades back to normal, and it doesnât appear to install. How do I troubleshoot this?
I tried installing this for the first time yesterday and again this morning. I am receiving the following error;
18-07-16 15:43:25 INFO (SyncWorker_1) [hassio.docker.interface] Pull image hassioaddons/ide-armhf tag 0.4.0.
18-07-16 15:47:48 ERROR (SyncWorker_1) [hassio.docker.interface] Canât install hassioaddons/ide-armhf:0.4.0 -> 404 Client Error: Not Found (âno such image: hassioaddons/ide-armhf:0.4.0: No such image: hassioaddons/ide-armhf:0.4.0â).
I was able to get this installed by restoring a full snapshot on a new hassio 1.7 image. Funny thing is after restoring the snapshot it said 0.73.2 was available and when I tried upgrading the logs showed the same 404 no such image for the update. I then tried and installed the IDE add-on. After that I could upgrade to 0.73.2. Weird.
Doing a hassio ne info also still shows the 404 not found error. I guess this is a known bug and off topic here.
Is there any possibility to run this addon, when my Hass.io on Rpi3 is running on different port than 8321? If yes, what should I change to make it work?