I’ve searched this forum for similar issues, but the existing threads all use essentially the same configuration I’m already running.
I’m attempting to run Jellyfin inside an iocage jail on TrueNAS Core (FreeBSD 13.5‑RELEASE‑p3). The jail starts correctly, yet Jellyfin terminates immediately with the error:
I’ve already tried the usual work‑arounds:
I’m sorry if this question is off‑topic for "vanilla" FreeBSD – it’s about a FreeBSD‑derived system (TrueNAS) but I hope the community can still help.
After lots of troubleshooting, this is my jail config.
Jail configuration (JSON export):
Is there a known regression in this release that blocks a particular syscall (such as setuid, mlock, procfs mount, sysarch, etc.) that Jellyfin/.NET relies on?
Any pointers, config tweaks, or known bugs would be greatly appreciated.
Thanks!
I’m attempting to run Jellyfin inside an iocage jail on TrueNAS Core (FreeBSD 13.5‑RELEASE‑p3). The jail starts correctly, yet Jellyfin terminates immediately with the error:
Code:
Bad system call
I’ve already tried the usual work‑arounds:
- Mounted /dev/fd, /dev/shm, and /proc inside the jail.
- Set allow_mount=1, allow_raw_sockets=1, allow_mlock=1, allow_set_hostname=1, allow_socket_af=1, allow_sysvipc=1, allow_tun=1.
- Added allow_mount_devfs=1
- Kept allow_vmm=0.
- Verified the jail config (see JSON below).
I’m sorry if this question is off‑topic for "vanilla" FreeBSD – it’s about a FreeBSD‑derived system (TrueNAS) but I hope the community can still help.
After lots of troubleshooting, this is my jail config.
Jail configuration (JSON export):
Code:
{
"allow_chflags": 0,
"allow_mlock": 1,
"allow_mount": 1,
"allow_mount_devfs": 1,
"allow_quotas": 0,
"allow_raw_sockets": 1,
"allow_set_hostname": 1,
"allow_socket_af": 1,
"allow_sysvipc": 1,
"allow_tun": 1,
"allow_vmm": 0,
"assign_localhost": 0,
"boot": 0,
"bpf": 0,
"cloned_release": "13.5-RELEASE",
"comment": "none",
"defaultrouter": "172.16.2.37",
"defaultrouter6": "auto",
"devfs_ruleset": "1",
"dhcp": 0,
"exec_fib": "0",
"exec_jail_user": "root",
"exec_poststart": "/usr/bin/true",
"exec_poststop": "/usr/bin/true",
"exec_prestart": "/usr/bin/true",
"exec_prestop": "/usr/bin/true",
"exec_start": "/bin/sh /etc/rc",
"exec_stop": "/bin/sh /etc/rc.shutdown",
"exec_system_user": "root",
"host_domainname": "none",
"host_hostname": "jellyfin",
"host_hostuuid": "jellyfin",
"host_time": 1,
"hostid": "74902500-e057-0706-0025-907457e00e0f",
"interfaces": "vnet0:bridge0",
"ip4": "new",
"ip4_addr": "vnet0|172.16.2.36/24",
"ip4_saddrsel": 1,
"ip6": "new",
"ip6_saddrsel": 1,
"ip_hostname": 0,
"jail_zfs": 0,
"jail_zfs_dataset": "iocage/jails/jellyfin/data",
"jail_zfs_mountpoint": "none",
"last_started": "2025-09-17 15:12:55",
"mac_prefix": "022590",
"nat": 0,
"nat_forwards": "none",
"notes": "none",
"priority": "99",
"release": "13.5-RELEASE-p3",
"resolver": "/etc/resolv.conf",
"rtsold": 0,
"securelevel": "0",
"sysvmsg": "new",
"sysvsem": "new",
"sysvshm": "new",
"template": 0,
"vnet": 1,
"vnet0_mac": "02259029d59a 02259029d59b",
"vnet_default_interface": "em1",
"vnet_interfaces": "none"
}
Is there a known regression in this release that blocks a particular syscall (such as setuid, mlock, procfs mount, sysarch, etc.) that Jellyfin/.NET relies on?
Any pointers, config tweaks, or known bugs would be greatly appreciated.
Thanks!