Security/performance compromise of using TrueNAS to run apps vs using
a traditional app server
reddit / selfhosted

----------------------------------------------------------------------
Own_Career_7388 · 2023-11-15 08:13

I know that this is not the TrueNAS subreddit, but I wanted to ask
this question here in hopes of getting opinions that are less affected
by confirmation bias than those that might be voiced over there.

Right now I'm running TrueNAS simply as a LAN NAS, but I eventually
want to host my own cloud storage with NextCloud, as well as stream my
NAS movie/tv/music files via Jellyfin on WAN.

I know that best security (and performance) practice is to segregate
app and media servers, but I wanted to ask just how much of a security
compromise is being made by using TureNAS to run apps, and (if I do
it) what steps can be used to mitigate a venerability from one app
compromising the rest of the system.

From my research I see that Core uses FreeBSD jails with iocage and
Scale uses docker-kubernetes containers on linux, but I've never set
up a jail or container before so I don't know the risks of either to
the host kernel or other jail/containers.