Passing hw to rootless is hard. I think you’d need to match the groups inside the container to the host or make sure that the user can access the needed stuff from uid alone, as the group might not exist in the container and you end up groupless inside
I've got this running on my jellyfin rootless podman setup. Let me check out the config when I get home, I'm out at the moment. Ping me here if I don't update this in the next day or so.
OK, looks like my setup isn't any different to yours, except that I have --security-opt=label=disable set too. The reason for this is because of this issue, which should be fixed by now. Your version may be too old?
If you get the same result from ausearch as on that issue, you may be seeing the same problem.
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Beginning of January 1st 2024 this rule WILL be enforced. Posts that are not tagged will be warned and if not fixed within 24h then removed!