FreeBSD, podman and dotnet (mlock)

[josh-endries]

Hello,

I have been trying to get the Jellyfin container running via podman on FreeBSD. I am able to run other Linux containers/commands, but Jellyfin uses dotnet, which seems to be causing an issue ("Failed to create CoreCLR, HRESULT: 0x8007FF02"). From my research it seems like this is due to .NET locking a single page of memory (I think for locks/semaphores).

It seems like the typical way this gets solved elsewhere (e.g. when running via jails) is by enabling "mlock" within the jail, but I haven't been able to find anything related to "mlock" for podman, which isn't too surprising if it's a FreeBSD-ism (there are dozens of us!). I have tried various switches like --privileged, --cap-add=IPC_LOCK and other semi-random things I've found reference to, but nothing helps. Is there a way to enable this functionality? Or maybe I am looking in the wrong place. Or maybe it's just not possible.

My typical command is sudo podman run --os=linux docker.io/jellyfin/jellyfin. Using the ghcr.io image or without --os gives the same result.

FreeBSD 15.0
podman-5.6.1 (pkg)
ocijail 0.4.0 (pkg)