Jellyfin

Volunteer-built media solution that puts you in control — stream to any device from your own server, with no strings attached.

Port	8096
Registry	ghcr.io/daemonless/jellyfin
Source	https://github.com/jellyfin/jellyfin
Website	https://jellyfin.org/

Version Tags

Tag	Description	Best For
latest / pkg	FreeBSD Quarterly. Uses stable, tested packages.	Most users. Matches Linux Docker behavior.
pkg-latest	FreeBSD Latest. Rolling package updates.	Newest FreeBSD packages.

Prerequisites

Before deploying, ensure your host environment is ready. See the Quick Start Guide for host setup instructions.

Deployment

Podman Compose

services:
  jellyfin:
    image: ghcr.io/daemonless/jellyfin:latest
    container_name: jellyfin
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=UTC
    volumes:
      - "/path/to/containers/jellyfin:/config"
      - "/path/to/containers/jellyfin/cache:/cache" # optional
      - "/path/to/tv:/tv" # optional
      - "/path/to/movies:/movies" # optional
    ports:
      - 8096:8096
    annotations:
      org.freebsd.jail.allow.mlock: "true"
    restart: unless-stopped

AppJail Director

.env:

DIRECTOR_PROJECT=jellyfin
PUID=1000
PGID=1000
TZ=UTC

appjail-director.yml:

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  jellyfin:
    name: jellyfin
    options:
      - container: 'boot args:--pull'
    oci:
      user: root
      environment:
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
    volumes:
      - jellyfin: /config
      - jellyfin_cache: /cache
      - tv: /tv
      - movies: /movies
volumes:
  jellyfin:
    device: '/path/to/containers/jellyfin'
  jellyfin_cache:
    device: '/path/to/containers/jellyfin/cache'
  tv:
    device: 'tv'
  movies:
    device: 'movies'

Makejail:

ARG tag=latest

OPTION overwrite=force
OPTION from=ghcr.io/daemonless/jellyfin:${tag}
SET allow.mlock=1

Podman CLI

podman run -d --name jellyfin \
  -p 8096:8096 \
  --annotation 'org.freebsd.jail.allow.mlock=true' \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=UTC \
  -v /path/to/containers/jellyfin:/config \
  -v /path/to/containers/jellyfin/cache:/cache # optional \
  -v /path/to/tv:/tv # optional \
  -v /path/to/movies:/movies # optional \
  ghcr.io/daemonless/jellyfin:latest

Ansible

- name: Deploy jellyfin
  containers.podman.podman_container:
    name: jellyfin
    image: ghcr.io/daemonless/jellyfin:latest
    state: started
    restart_policy: always
    env:
      PUID: "1000"
      PGID: "1000"
      TZ: "UTC"
    ports:
      - "8096:8096"
    volumes:
      - "/path/to/containers/jellyfin:/config"
      - "/path/to/containers/jellyfin/cache:/cache" # optional
      - "/path/to/tv:/tv" # optional
      - "/path/to/movies:/movies" # optional
    annotation:
      org.freebsd.jail.allow.mlock: "true"

Access at: http://localhost:8096

Parameters

Environment Variables

Variable	Default	Description
PUID	1000	User ID for the application process
PGID	1000	Group ID for the application process
TZ	UTC	Timezone for the container

Volumes

Path	Description
/config	Configuration directory
/cache	Cache directory (Optional)
/tv	TV Series library (Optional)
/movies	Movie library (Optional)

Ports

Port	Protocol	Description
8096	TCP	Web UI

Hardware Acceleration (VAAPI)

Intel iGPU hardware transcoding is supported via VAAPI. The image includes libva, libva-intel-media-driver, and gmmlib.

Host setup required — the GPU must be enabled and a devfs ruleset must expose the DRI devices into the jail:

1. Install the DRM kernel module and firmware:

   pkg install drm-kmod libva-intel-media-driver gmmlib
   echo 'kld_list="i915kms"' >> /etc/rc.conf
   kldload i915kms
   

2. Add a devfs ruleset to /etc/devfs.rules:

   [devfsrules_jails_gpu=61182]
   add include $devfsrules_hide_all
   add include $devfsrules_unhide_basic
   add include $devfsrules_unhide_login
   add path 'bpf*' unhide
   add path 'dri' unhide
   add path 'dri/*' unhide mode 0666
   add path 'drm*' unhide mode 0666
   

3. Configure the jail to use ruleset 61182 and enable allow.mlock (already set in the example compose above).

4. In Jellyfin: Dashboard → Playback → Transcoding → set Hardware acceleration to VAAPI, device /dev/dri/renderD128.

Architectures: amd64 User: bsd (UID/GID via PUID/PGID, defaults to 1000:1000) Base: FreeBSD 15.0

---

Need help? Join our Discord community.