Run Home Assistant on Qubes OS

Installation
1

I’m trying to get Home Assistant running on Qubes OS. Has anyone here gotten it working? If so, how did you set it up? I managed to start it using a generic image, but I can’t get networking to work. Has anyone here gotten it working? If so, how did you set it up?

The generic image is running correctly and the Home Assistant service is operational internally (verified by curl localhost:8123 returning HTTP 200 OK) from ha-console however if i try the same from the vmqubes(debian12) terminal that runs virt-manager with homeassisant or from any other machine from my network its completely unreachable.

cant have bridges available on qubes-vm.. need help
Bridge Mode (type='bridge'): Failed because no bridge device exists.

Direct Mode (macvtap, type='direct'): Failed because Qubes OS blocks the creation of macvtap interfaces from within an AppVM.

Virtual Bridge (virbr0): The default libvirt network (which would create virbr0) was removed, and attempts to recreate it fail due to permission errors.

Port Forwarding (iptables): Even with net.ipv4.ip_forward=1, the host cannot route traffic because the homeassisstant is on a completely isolated network interface that lacks proper routing to the host's main interface.

How can we provide homeassisant awith a network interface that is acessible from qubesvm or the wider lan given that the qubesvm is with no bridge interfaces

any insight on how to proceed i appreciate

2

Hello tulum,
Welcome to the Home Assistant Forum!

It looks like this OS is running a lot of security features that are likely to bump up against HA and would provide plenty of problems to solve.

In addition, the 'Core' load of HA is no longer supported as of the beginning of this year, only HAOS and Container remain as supported installation options to you are on your own here.

Best I can say is good luck, and I hope you succeed or have fun trying!

3

I'd simply give up. It is not going to work.

HAOS needs to live on a "flat" network (just one/24 network) and that network needs to have Internet access and support IPv6. Hence, my prediction of "...not going to work"

If security is a big issue. Install Proxmox on bare metal, then HAOS on that in a VM. Then set up a Proxmox Backup Server (on different hardware) and take frequent snapshots. The backup server has very good deduplication, so you can afford to do a backup every day or even every hour.

Then run everything behind an OPNsense Router. https://opnsense.org/

Then to access HAOS, you use a WireGuard VPN (run the WireGuard server on the OPNsense router.