Stefan Agner 36124eafae Add firewall rules to protect Docker gateway from external access (#6650) ...

Add iptables rules via a systemd transient unit to drop traffic
addressed to the bridge gateway IP from non-bridge interfaces.

The firewall manager waits for the transient unit to complete and
verifies success via D-Bus property change signals. On failure, the
system is marked unhealthy and host-network add-ons are prevented
from booting.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-19 16:46:17 +01:00

..

addons

Add firewall rules to protect Docker gateway from external access (#6650)

2026-03-19 16:46:17 +01:00

api

Return 401 for non-Basic Authorization headers on /auth endpoint (#6612)

2026-03-04 15:55:49 -05:00

backups

Treat empty string password as None in backup restore (#6618)

2026-03-10 09:53:43 +01:00

dbus

Use Python 3.14(.3) in CI and base image (#6586)

2026-03-05 21:11:25 +01:00

dbus_service_mocks

Remove the option to revert to overlay2 driver (#6399)

2025-12-05 14:45:56 +01:00

docker

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

fixtures

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

hardware

If D-Bus to UDisks2 is not connected, return None (#6265)

2025-10-24 10:22:02 +02:00

homeassistant

Unify Core user handling with HomeAssistantUser model (#6558)

2026-02-17 18:31:08 +01:00

host

Add firewall rules to protect Docker gateway from external access (#6650)

2026-03-19 16:46:17 +01:00

jobs

Respect auto-update setting for plug-in auto-updates (#6606)

2026-03-05 09:04:33 +01:00

misc

Respect auto-update setting for plug-in auto-updates (#6606)

2026-03-05 09:04:33 +01:00

mounts

Bump dbus-fast from 2.45.1 to 3.1.2 (#6317)

2025-11-25 16:25:06 +01:00

os

Block OS updates when the system is unhealthy (#6053)

2025-07-31 11:23:57 +02:00

plugins

Respect auto-update setting for plug-in auto-updates (#6606)

2026-03-05 09:04:33 +01:00

resolution

Fix fallback time sync, create repair issue if time is out of sync (#6625)

2026-03-13 16:01:38 +01:00

security

Remove Codenotary integrity check (#6236)

2025-11-03 20:13:15 +01:00

services

Fix services validation & add tests (#1456)

2020-01-27 21:38:26 +01:00

store

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

utils

Use Python 3.14(.3) in CI and base image (#6586)

2026-03-05 21:11:25 +01:00

__init__.py

Rename Hass.io -> Supervisor (#1522)

2020-02-21 17:55:41 +01:00

common.py

Migrate images from dockerpy to aiodocker (#6252)

2025-11-12 20:54:06 +01:00

conftest.py

Add firewall rules to protect Docker gateway from external access (#6650)

2026-03-19 16:46:17 +01:00

const.py

Improve connection settings tests (#5278)

2024-08-30 16:07:04 +02:00

test_arch.py

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

test_auth.py

FileConfiguration uses executor for I/O (#5652)

2025-02-26 19:11:11 +01:00

test_bus.py

Support dynamic device access cgroup (#3421)

2022-01-26 16:48:23 +01:00

test_core.py

Fix fallback time sync, create repair issue if time is out of sync (#6625)

2026-03-13 16:01:38 +01:00

test_coresys.py

Recreate aiohttp ClientSession after DNS plug-in load (#5862)

2025-05-06 16:23:40 +02:00

test_ingress.py

Unify Core user handling with HomeAssistantUser model (#6558)

2026-02-17 18:31:08 +01:00

test_main.py

Bump pre-commit ruff to 0.5.7 and reformat (#5242)

2024-08-13 20:53:56 +02:00

test_supervisor.py

Add Supervisor connectivity check after DNS restart (#6005)

2025-07-10 11:08:10 +02:00

test_updater.py

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

test_validate.py

feat: Add opt-in IPv6 for containers (#5879)

2025-06-12 11:32:24 +02:00