Bluetooth docker container - getting AccessDenied error for integration

ramrom · December 9, 2023, 3:00am

I’ve recently upgraded from Ubuntu 22.04 LTS to 23.10.

the bluetooth integration was running perfectly before the upgrade. now i’m seeing an access denied error. See the below screenshot when i hover over the integration in the UI.

hassbluetooth-integrationhover-accessdenied

Additionally I’m seeing this error in the hass logs:

2023-11-30 20:47:44.537 ERROR (MainThread) [homeassistant] Error doing job: Future exception was never retrieved
Traceback (most recent call last):…
File “/lsiopy/lib/python3.11/site-packages/bluetooth_adapters/dbus.py”, line 137, in _get_dbus_managed_objects
reply = await bus.call(msg)…
^^^^^^^^^^^^^^^^^^^…
File “/lsiopy/lib/python3.11/site-packages/dbus_fast/aio/message_bus.py”, line 399, in call
await future
File “/lsiopy/lib/python3.11/site-packages/dbus_fast/aio/message_reader.py”, line 22, in _message_reader…
message = unmarshaller._unmarshall()
^^^^^^^^^^^^^^^^^^^^^^^^^^…
File “/lsiopy/lib/python3.11/site-packages/dbus_fast/_private/unmarshaller.py”, line 777, in _unmarshall
self._read_header()…
File “/lsiopy/lib/python3.11/site-packages/dbus_fast/_private/unmarshaller.py”, line 638, in _read_header
self._read_to_pos(HEADER_SIGNATURE_SIZE)
File “/lsiopy/lib/python3.11/site-packages/dbus_fast/_private/unmarshaller.py”, line 376, in _read_to_pos
self._read_sock_without_fds(pos)…
File “/lsiopy/lib/python3.11/site-packages/dbus_fast/_private/unmarshaller.py”, line 339, in _read_sock_without_fds
raise EOFError()…
EOFError…

I’m running a docker container, HASS version 2023.11.2
I’m using the ASUS USB-BT500 dongle, a supported device
I’m using dbus-broker (verified this is what systemd is running)
I’ve got BlueZ installed as a lib for sure

Any idea what might have gone wrong?

Looks like ubuntu 23.10 has apparmor enforcing and is denying my home assistant container from making the dbus calls to access the bluetooth controller.

dmesg has these messages:

        [Fri Oct 18 15:17:52 2024] audit: type=1107 audit(1729282653.488:225754): pid=1527 uid=103 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_method_call" bus="system" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" method="Hello" mask="send" label="docker-default" peer_label="unconfined" exe="/usr/bin/dbus-broker" sauid=103 hostname=? addr=? terminal=?'
        [Fri Oct 18 15:17:52 2024] audit: type=1107 audit(1729282653.489:225755): pid=1527 uid=103 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_method_call" bus="system" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" method="AddMatch" mask="send" label="docker-default" peer_label="unconfined" exe="/usr/bin/dbus-broker" sauid=103 hostname=? addr=? terminal=?'

Looks like docker-default profile doesnt have the privs, anyone dealt with fixing this?

ramrom · November 14, 2024, 5:03am

in case anyone is interested, this had the fix:

github.com/home-assistant/core

Bluetooth in container give access denied error

opened 03:32PM - 07 Aug 22 UTC

closed 03:38PM - 09 Nov 22 UTC

Dinges28

unsupported integration: bluetooth

### The problem After upgrading to the new home assistant 2022.8.1 i get an err…or for setting up the bluetooth `Opnieuw proberen in te stellen: Failed to start Bluetooth: [org.freedesktop.DBus.Error.AccessDenied] An AppArmor policy prevents this sender from sending this message ` Tried both options mentioned in the documentation to -v the DBus ### What version of Home Assistant Core has the issue? 2022.8.1 ### What was the last working version of Home Assistant Core? core-2022.7.7 ### What type of installation are you running? Home Assistant Container ### Integration causing the issue Bluetooth ### Link to integration documentation on our website https://www.home-assistant.io/integrations/bluetooth ### Diagnostics information _No response_ ### Example YAML snippet _No response_ ### Anything in the logs that might be useful for us? ```txt Error handling request ----------------------- Logger: aiohttp.server Source: components/bluetooth/util.py:19 First occurred: 17:17:57 (1 occurrences) Last logged: 17:17:57 Error handling request Traceback (most recent call last): File "/usr/local/lib/python3.10/site-packages/aiohttp/web_protocol.py", line 435, in _handle_request resp = await request_handler(request) File "/usr/local/lib/python3.10/site-packages/aiohttp/web_app.py", line 504, in _handle resp = await handler(request) File "/usr/local/lib/python3.10/site-packages/aiohttp/web_middlewares.py", line 117, in impl return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/security_filter.py", line 60, in security_filter_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/forwarded.py", line 100, in forwarded_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/request_context.py", line 28, in request_context_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/ban.py", line 82, in ban_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/auth.py", line 236, in auth_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/view.py", line 136, in handle result = await result File "/usr/src/homeassistant/homeassistant/components/config/config_entries.py", line 215, in post return await super().post(request) File "/usr/src/homeassistant/homeassistant/components/http/data_validator.py", line 73, in wrapper result = await method(view, request, data, *args, **kwargs) File "/usr/src/homeassistant/homeassistant/helpers/data_entry_flow.py", line 70, in post result = await self._flow_mgr.async_init( File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 222, in async_init flow, result = await task File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 249, in _async_init result = await self._async_handle_step(flow, flow.init_step, data, init_done) File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 359, in _async_handle_step result: FlowResult = await getattr(flow, method)(user_input) File "/usr/src/homeassistant/homeassistant/components/bluetooth/config_flow.py", line 69, in async_step_init if not (adapters := await async_get_bluetooth_adapters()): File "/usr/src/homeassistant/homeassistant/components/bluetooth/util.py", line 19, in async_get_bluetooth_adapters adapters = await get_bluetooth_adapters() File "/usr/local/lib/python3.10/site-packages/bluetooth_adapters/__init__.py", line 35, in get_bluetooth_adapters reply = await bus.call(msg) File "/usr/local/lib/python3.10/site-packages/dbus_next/aio/message_bus.py", line 305, in call await future File "/usr/local/lib/python3.10/site-packages/dbus_next/aio/message_bus.py", line 365, in _message_reader if self._unmarshaller.unmarshall(): File "/usr/local/lib/python3.10/site-packages/dbus_next/_private/unmarshaller.py", line 304, in unmarshall self._unmarshall() File "/usr/local/lib/python3.10/site-packages/dbus_next/_private/unmarshaller.py", line 243, in _unmarshall self.read(16, prefetch=True) File "/usr/local/lib/python3.10/site-packages/dbus_next/_private/unmarshaller.py", line 91, in read raise EOFError() EOFError ======================== Error doing job: Future exception was never retrieved ----------------------------------------------------- Logger: homeassistant Source: components/bluetooth/util.py:19 First occurred: 17:18:00 (1 occurrences) Last logged: 17:18:00 Error doing job: Future exception was never retrieved Traceback (most recent call last): File "/usr/local/lib/python3.10/site-packages/aiohttp/web_protocol.py", line 435, in _handle_request resp = await request_handler(request) File "/usr/local/lib/python3.10/site-packages/aiohttp/web_app.py", line 504, in _handle resp = await handler(request) File "/usr/local/lib/python3.10/site-packages/aiohttp/web_middlewares.py", line 117, in impl return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/security_filter.py", line 60, in security_filter_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/forwarded.py", line 100, in forwarded_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/request_context.py", line 28, in request_context_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/ban.py", line 82, in ban_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/auth.py", line 236, in auth_middleware return await handler(request) File "/usr/src/homeassistant/homeassistant/components/http/view.py", line 136, in handle result = await result File "/usr/src/homeassistant/homeassistant/components/config/config_entries.py", line 215, in post return await super().post(request) File "/usr/src/homeassistant/homeassistant/components/http/data_validator.py", line 73, in wrapper result = await method(view, request, data, *args, **kwargs) File "/usr/src/homeassistant/homeassistant/helpers/data_entry_flow.py", line 70, in post result = await self._flow_mgr.async_init( File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 222, in async_init flow, result = await task File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 249, in _async_init result = await self._async_handle_step(flow, flow.init_step, data, init_done) File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 359, in _async_handle_step result: FlowResult = await getattr(flow, method)(user_input) File "/usr/src/homeassistant/homeassistant/components/bluetooth/config_flow.py", line 69, in async_step_init if not (adapters := await async_get_bluetooth_adapters()): File "/usr/src/homeassistant/homeassistant/components/bluetooth/util.py", line 19, in async_get_bluetooth_adapters adapters = await get_bluetooth_adapters() File "/usr/local/lib/python3.10/site-packages/bluetooth_adapters/__init__.py", line 35, in get_bluetooth_adapters reply = await bus.call(msg) File "/usr/local/lib/python3.10/site-packages/dbus_next/aio/message_bus.py", line 305, in call await future File "/usr/local/lib/python3.10/site-packages/dbus_next/aio/message_bus.py", line 365, in _message_reader if self._unmarshaller.unmarshall(): File "/usr/local/lib/python3.10/site-packages/dbus_next/_private/unmarshaller.py", line 304, in unmarshall self._unmarshall() File "/usr/local/lib/python3.10/site-packages/dbus_next/_private/unmarshaller.py", line 243, in _unmarshall self.read(16, prefetch=True) File "/usr/local/lib/python3.10/site-packages/dbus_next/_private/unmarshaller.py", line 91, in read raise EOFError() EOFError ``` ### Additional information _No response_

i created a new app armor profile per the comment and applied it to the docker image using the security opt