Permission denied issue on snap install adguard-home #4833

Open
opened 2026-03-04 05:35:51 -05:00 by deekerman · 5 comments
Owner

Originally created by @nkqlee on GitHub (Oct 28, 2023).

Prerequisites

Platform (OS and CPU architecture)

Ubuntu 22.04.3 LTS arm64

Installation

GitHub releases or script from README

Setup

On one machine

AdGuard Home version

v0.107.40

Action

permission denied when applying path of privkey.pem

Expected result

config saved

Actual result

permission denied

Additional information and/or screenshots

Screenshot 2023-10-29 010152
1st pic showed that adguard can access /etc/let*/live to view the fullchain.pem without permission issue

Screenshot 2023-10-29 010300
2nd pic showed that when tried to paste the path of privkey.pem, then permission denied

Originally created by @nkqlee on GitHub (Oct 28, 2023). ### Prerequisites - [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) and found no answer - [X] I have searched other issues and found no duplicates - [X] I want to report a bug and not [ask a question or ask for help](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) - [X] I have set up AdGuard Home correctly and [configured clients to use it](https://github.com/AdguardTeam/AdGuardHome/wiki/Clients). (Use the [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) for help with installing and configuring clients.) ### Platform (OS and CPU architecture) Ubuntu 22.04.3 LTS arm64 ### Installation GitHub releases or script from README ### Setup On one machine ### AdGuard Home version v0.107.40 ### Action permission denied when applying path of privkey.pem ### Expected result config saved ### Actual result permission denied ### Additional information and/or screenshots ![Screenshot 2023-10-29 010152](https://github.com/AdguardTeam/AdGuardHome/assets/6596534/352f4982-9a40-480a-8c43-711ee527ebec) 1st pic showed that adguard can access /etc/let*/live to view the fullchain.pem without permission issue ![Screenshot 2023-10-29 010300](https://github.com/AdguardTeam/AdGuardHome/assets/6596534/49fdef41-ca09-446f-9294-0e0276c408ec) 2nd pic showed that when tried to paste the path of privkey.pem, then permission denied
Author
Owner

@ainar-g commented on GitHub (Oct 31, 2023):

We cannot reproduce this on our Snapcraft installation. Please make sure that nothing else is blocking access, e.g. AppArmor.

@ainar-g commented on GitHub (Oct 31, 2023): We cannot reproduce this on our Snapcraft installation. Please make sure that nothing else is blocking access, e.g. AppArmor.
Author
Owner

@nkqlee commented on GitHub (Nov 1, 2023):

checked with dmesg that showed denied while access privatekey
Screenshot 2023-11-02 005425
but i cannot find any info that can get rid of denied by apparmor for snap adguard-home

@nkqlee commented on GitHub (Nov 1, 2023): checked with dmesg that showed denied while access privatekey ![Screenshot 2023-11-02 005425](https://github.com/AdguardTeam/AdGuardHome/assets/6596534/a06fbb3f-b8ac-4fbe-a2a5-6653a53d6a63) but i cannot find any info that can get rid of denied by apparmor for snap adguard-home
Author
Owner

@nkqlee commented on GitHub (Nov 1, 2023):

found a way to have a quick fix
image
changed from enforced mode to complain mode in apparmor, but should have a bettter solution for this

@nkqlee commented on GitHub (Nov 1, 2023): found a way to have a quick fix ![image](https://github.com/AdguardTeam/AdGuardHome/assets/6596534/0060bebf-9bc5-4e69-95ef-0fcc9ae01b74) changed from enforced mode to complain mode in apparmor, but should have a bettter solution for this
Author
Owner

@ainar-g commented on GitHub (Nov 2, 2023):

Since it is AppArmor, you're probably better off consulting the Snapcraft Forum about this, as I'm not sure what we could do here and how to diagnose, what could be different about that particular file or directory.

@ainar-g commented on GitHub (Nov 2, 2023): Since it is AppArmor, you're probably better off consulting the [Snapcraft Forum](https://forum.snapcraft.io/) about this, as I'm not sure what we could do here and how to diagnose, what could be different about that particular file or directory.
Author
Owner

@CDzungx commented on GitHub (Feb 8, 2024):

Same problem, tried to use aa-complain to put AGH to complain mode but it keeps changing back to enforce mode (which cause permission denied) after some time.

@CDzungx commented on GitHub (Feb 8, 2024): Same problem, tried to use aa-complain to put AGH to complain mode but it keeps changing back to enforce mode (which cause permission denied) after some time.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/AdGuardHome#4833
No description provided.