jellyfin LXC is privilged but there still seems to be a permission issue (mountpoint)

[n0rrin]

I have a question concerning the jellyfin-lxc (installed by your script).
It is privileged, but there still seems to be a permission issue.
Marked episodes or the points where i stopped watching are not saved.

The media is stored in mountpoints (pct set ).

What do i have to do here?
Can you help me?

[Data-PhiIe]

I actually think I know the fix for this, I had a lot of storage permission issues myself when I was getting everything setup. You have to align the permissions and ownership of the files and storage with the host. the SSID and UUID of the jellyfin user needs to be the same. So as an example lets say you have a file some-media.mkv and you ran an ls -la and see that file is owned by someuser:someuser. You need to find the UUID/SSID of someuser:someuser (for examples sake lets sat 1001:1001), then change the jellyfin:jellyfin UUID/SSID so that it would be the same 1001:1001, then you would have to update all the related files to the jellyfin service so that it can access the files it needs to run. IDR where I found all the commands for that since I did it so long ago; however with the context I provided plus the search engine of your choice you should have an easier time from here. You would also need to do the same for any LXC's you have running that access/provide/manage the files in that storage, example being download clients, or meta data handlers (like the *arrr suite, or in my case shoko).

Hope this helps! :)

[n0rrin]

Yes, this seems to be the right road.
I was playing with "advanced chown" of the media-folders in the midnight commander but surprisingly that did not make the job. Had to enter the command in a terminal (cli) and then the permissions changed.

But as you mentioned, the problem is that there are a few more players. In my case it is sabnzbd (another lxc) that has to create new folders and to write files in the media-folders before i can watch them with jellyfin.

I did not get it 100%.
I set it all to 777, but that seems niot enough.
The user has to "fit", but how can both users - "sabnzbd" and "jellyfin" - have full access on my media-folders?

[Data-PhiIe]

Yes, this seems to be the right road. I was playing with "advanced chown" of the media-folders in the midnight commander but surprisingly that did not make the job. Had to enter the command in a terminal (cli) and then the permissions changed.

But as you mentioned, the problem is that there are a few more players. In my case it is sabnzbd (another lxc) that has to create new folders and to write files in the media-folders before i can watch them with jellyfin.

I did not get it 100%. I set it all to 777, but that seems niot enough. The user has to "fit", but how can both users - "sabnzbd" and "jellyfin" - have full access on my media-folders?

#note I misspoke it's GID and UID, I had WiFi on the brain because I was working on our WiFi network when I made this post my bad.

This is what I was trying to explain, I must have not have done a good job conveying what needs to be done, I will try to elaborate further.
So "jellyfin" and "sabnzbd" are the respective users in the respective LXC containers, however, "jellyfin" and "sabnzbd" are just the paint on the tin. Linux/Unix ACLs only care about the number associated with those usernames, the aforementioned UID/GID from my previous post. You have to find out what numbers are associated with those usernames, and change them to be the same on both containers.
In each container use the command id <username> EX: id jellyfin in the jellyfin container. from after you know both you want to make them the same on both LXC containers, the make sure you update ownership of all files associated with jellyfin and/or the other LXC to match the new UID/GID, otherwise the services will have permission issues to access files they need to remain functional, there is a command to sweep and update GID/UID of all files associated with a previous UID/GID, so make sure not forget what the original GID/UID of the users were. I pulled this next part from an AI summery of how to do this, I looks like what I did before, but proceed with caution I'm not vetting this myself, maybe spin up a couple LXCs to test first:

"To update the UID and GID of all files when you change your UID, use the commands usermod -u <newUID> user to change the UID and find / -user <oldUID> -exec chown -h <username> {} \; to update the ownership of files. Additionally, use find / -group <oldGID> -exec chgrp -h <username> {} \; to update the GID for files owned by the user."

[Mortifier13]

I've had similar issues using Plex on unRaid and I would basically have to reset the user/group and file permissions. When I would add movies or tv shows manually they would inherit my username and wrote a script I would run periodically to reset them to a nobody/nobody permission would help, I'm assuming it is similar in Jellyfin.