From 68fd970fc61d8e0498cbf3c31012c39f3378faf4 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Fri, 19 Jun 2026 13:58:42 +0000
Subject: [PATCH] netalertx: suppress misleading upstream capabilities-audit
 ALERT (#2454)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Under the Home Assistant Supervisor the required NET_RAW/NET_ADMIN
capabilities are granted, but NetAlertX's upstream capabilities-audit
script cannot read them and prints a "🚨 ALERT: capabilities are missing"
banner. Users repeatedly mistook this informational message for the cause
of unrelated issues. Neutralise the audit script at build time (kept in
place as a no-op for the entrypoint runner) and bump version/changelog.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WfZ5JKAR2NHP1KjoAGyBBD
---
 netalertx/CHANGELOG.md |  3 +++
 netalertx/Dockerfile   | 12 ++++++++++++
 netalertx/config.yaml  |  2 +-
 3 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/netalertx/CHANGELOG.md b/netalertx/CHANGELOG.md
index cac8e32e55..b2298fa7c8 100644
--- a/netalertx/CHANGELOG.md
+++ b/netalertx/CHANGELOG.md
@@ -1,3 +1,6 @@
+## 26.6.3-1 (2026-06-19)
+- Suppress the misleading upstream "capabilities audit" ALERT (NET_RAW/NET_ADMIN reported as missing). Under the Home Assistant Supervisor these capabilities are granted but the upstream audit cannot read them, which alarmed users (#2454).
+
 ## 26.6.3 (2026-06-05)
 - Update to latest version from jokob-sk/NetAlertX (changelog : https://github.com/jokob-sk/NetAlertX/releases)
 
diff --git a/netalertx/Dockerfile b/netalertx/Dockerfile
index a0f0d5b82b..a3b166495b 100644
--- a/netalertx/Dockerfile
+++ b/netalertx/Dockerfile
@@ -58,6 +58,18 @@ USER 0
 COPY rootfs/ /
 RUN find . -type f \( -name "*.sh" -o -name "run" -o -name "finish" \) -print -exec chmod +x {} \;
 
+# Neutralise the upstream capabilities-audit step.
+# Under the Home Assistant Supervisor the required NET_RAW/NET_ADMIN capabilities
+# are granted, but the upstream audit cannot read them and prints a misleading
+# "🚨 ALERT: capabilities are missing" banner that users mistake for the cause of
+# unrelated issues (see issue #2454). The script is informational only, so we
+# replace its body with a no-op while keeping the file in place for the runner.
+RUN set -eux; \
+    for f in $(find / -type f -name '*capabilities*audit*.sh' 2>/dev/null); do \
+      printf '#!/usr/bin/env bash\n# Neutralised by the Home Assistant add-on: the required capabilities are\n# provided by the Supervisor but the upstream audit misreports them, which\n# alarmed users (issue #2454). This audit is informational only.\n:\n' > "$f"; \
+      chmod +x "$f"; \
+    done
+
 # Bring in jq + gosu (and their libs). NO apk in final stage.
 COPY --from=ha_tools /out/ /
 
diff --git a/netalertx/config.yaml b/netalertx/config.yaml
index 8a7013dd7c..e87eff4f7a 100644
--- a/netalertx/config.yaml
+++ b/netalertx/config.yaml
@@ -42,4 +42,4 @@ slug: netalertx
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "26.6.3"
+version: "26.6.3-1"