Libmpv_render fails to render, app crashes since Failed to create data pipe due to MOJO_RESULT_RESOURCE_EXHAUSTED

loic.perrot · April 18, 2025, 11:56am

Hi, a snap of jellyfin I want to build launches in devmode, but not in strict confinement. Several errors are shown (I’ll give them below), the main ones being Failed to create data pipe due to MOJO_RESULT_RESOURCE_EXHAUSTED and libmpv_render errors. Since the app starts in devmode, I’d wager it’s a plug or environment issue. I just don’t know which ones. Any help is welcomed ! Thanks.

Here is the snapcraft.yaml :

name: jellyfin
base: core24
version: '0.1'
summary: Single-line elevator pitch for your amazing snap
description: |
  This is my-snap's description. You have a paragraph or two to tell the
  most important story about your snap. Keep it under 100 words though,
  we live in tweetspace and your description wants to look good in the snap
  store.

grade: stable
confinement: strict

apps:
  jellyfin:
    extensions: [gnome]
    command: /usr/bin/jellyfinmediaplayer
    command-chain: [bin/desktop-launch]
    plugs:
      - network
      - desktop
      - x11
      - wayland
      - opengl

layout:
  /usr/share/alsa:
    bind: $SNAP/usr/share/alsa
  /usr/share/qt5:
    bind: $SNAP/usr/share/qt5
  /usr/lib/x86_64-linux-gnu/qt5:
    bind: $SNAP/usr/lib/x86_64-linux-gnu/qt5
  /usr/share/jellyfinmediaplayer:
    bind: $SNAP/usr/share/jellyfinmediaplayer
  /usr/share/libdrm:
    bind: $SNAP/usr/share/libdrm

parts:
  desktop-qt5:
    source: https://github.com/ubuntu/snapcraft-desktop-helpers.git
    source-subdir: qt
    plugin: make
    make-parameters: ["FLAVOR=qt5"]
    build-packages:
      - build-essential
      - qtbase5-dev
      - dpkg-dev
    stage-packages:
      - libxkbcommon0
      - libxkbcommon-x11-0
      - fonts-ubuntu
      - dmz-cursor-theme
      - light-themes
      - adwaita-icon-theme
      - gnome-themes-extra
      - shared-mime-info
      - libqt5gui5
      - libgdk-pixbuf2.0-0
      - libqt5svg5
      - locales-all
      - xdg-user-dirs
      - fcitx-frontend-qt5

  jellyfin:
    after: [desktop-qt5]
    plugin: dump
    source: .
    stage-packages:
      - libqt5webengine5
      - libsdl2-2.0-0
      - libqt5xml5
      - libglu1-mesa
      - libglut3.12
      - qml-module-qtwebengine
      - qml-module-qtwebchannel
      - qml-module-qtquick-controls
      - qtwayland5
      - libqt5x11extras5
      - libsdl2-2.0-0
      - libxrandr2
      - libcec6
      - libmpv2
      - alsa-utils
      - xkb-data
      - qtwebengine5-dev
      - libqt5webenginecore5
      - libqt5webenginewidgets5
      - libqt5webchannel5
      - libxcb1
      - libproxy1v5
      - librsvg2-common
      - libdrm-common
      - libgl1

    organize:
      usr/lib/*-linux-gnu/blas/*: usr/lib/
      usr/lib/*-linux-gnu/lapack/*: usr/lib/
      usr/lib/*-linux-gnu/pulseaudio/*: usr/lib/

    override-build: |
      dpkg-deb -x jellyfin.deb $SNAPCRAFT_PART_INSTALL

Here are the errors displayed when starting the snap (it opens and closes right after launch by the way) :

loic@Vivobook:~/Documents/Snapcraft/Jellyfin$ jellyfin 
libpxbackend-1.0.so: cannot open shared object file: No such file or directory
Failed to load module: /home/loic/snap/jellyfin/common/.cache/gio-modules/libgiolibproxy.so
g_module_open() failed for /snap/jellyfin/x2/gnome-platform/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader_svg.so: /snap/jellyfin/x2/gnome-platform/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader_svg.so: undefined symbol: rsvg_handle_get_pixbuf_and_error
QSocketNotifier: Can only be used with threads started with QThread
/usr/share/libdrm/amdgpu.ids: No such file or directory
libpng warning: iCCP: known incorrect sRGB profile
Listening to socket: "/tmp/jmp_pmpUniqueApplication_loic.sock"
Signal handlers installed successfully.
Logging to  /home/loic/snap/jellyfin/x2/.local/share/jellyfinmediaplayer/logs/jellyfinmediaplayer.log
[98490:98813:0418/134445.510680:ERROR:platform_shared_memory_region_posix.cc(250)] Creating shared memory in /dev/shm/.org.chromium.Chromium.j1pdcJ failed: Permission denied (13)
[98490:98490:0418/134446.130831:ERROR:platform_shared_memory_region_posix.cc(250)] Creating shared memory in /dev/shm/.org.chromium.Chromium.bLc9mT failed: Permission denied (13)
[98490:98841:0418/134446.218959:ERROR:zygote_host_impl_linux.cc(263)] Failed to adjust OOM score of renderer with pid 98842: Permission denied (13)
[98490:98490:0418/134448.308228:ERROR:platform_shared_memory_region_posix.cc(250)] Creating shared memory in /dev/shm/.org.chromium.Chromium.oSaQz2 failed: Permission denied (13)
[98490:98490:0418/134448.308255:ERROR:command_buffer_proxy_impl.cc(102)] ContextResult::kFatalFailure: AllocateAndMapSharedMemory failed
[98490:98817:0418/134448.344856:ERROR:platform_shared_memory_region_posix.cc(250)] Creating shared memory in /dev/shm/.org.chromium.Chromium.8cNPqO failed: Permission denied (13)
[98490:98817:0418/134448.344940:FATAL:data_pipe.cc(14)] Failed to create data pipe due to MOJO_RESULT_RESOURCE_EXHAUSTED.
Trappe pour point d'arrêt et de trace (core dumped)

And here are the app’s own logs starting when it gets error-y :

2025-04-18 13:23:41.326 [debug] unknown @ 0 - cplayer: Configuration: -Dpython.bytecompile=-1 -Dlibmpv=true -Dbuild-date=false -Dcdda=enabled -Ddvdnav=enabled -Dsdl2=enabled -Dsndio=disabled -Ddvbin=enabled -Dprefix=/usr -Dlibdir=lib/x86_64-linux-gnu -Dlocalstatedir=/var -Dsysconfdir=/etc -Dbuildtype=plain -Dwrap_mode=nodownload
2025-04-18 13:23:41.326 [debug] unknown @ 0 - cplayer: List of enabled features: alsa av-channel-layout avif-muxer caca cdda cplugins cuda-hwaccel cuda-interop dmabuf-interop-gl dmabuf-wayland drm dvbin dvdnav egl egl-drm egl-helpers egl-wayland egl-x11 ffmpeg ffnvcodec gbm gl glibc-thread-name glob glob-posix gpl iconv jack javascript jpeg jpegxl lavu-uuid lcms2 libarchive libass libavdevice libbluray libdl libm libplacebo librt linux-fstatfs lua52 manpage-build memfd-create noexecstack pipewire posix posix-shm ppoll pulse rubberband rubberband-3 sdl2 sdl2-audio sdl2-gamepad sdl2-video sixel spirv-cross threads uchardet vaapi vaapi-drm vaapi-wayland vaapi-x11 vdpau vector vk-khr-display vt.h vulkan vulkan-interop wayland wayland-protocols-1-27 wayland-protocols-1-31 wayland-protocols-1-32 x11 xv zimg zimg-st428 zlib
2025-04-18 13:23:41.326 [debug] unknown @ 0 - cplayer: Waiting for scripts...
2025-04-18 13:23:41.327 [debug] unknown @ 0 - ao/pipewire: Headers version: 1.0.4
2025-04-18 13:23:41.327 [debug] unknown @ 0 - ao/pipewire: Library version: 1.0.5
2025-04-18 13:23:41.327 [debug] unknown @ 0 - ao/pipewire: Could not connect to context '(null)': Host is down
2025-04-18 13:23:41.327 [debug] unknown @ 0 - ao/pulse: Library version: 16.1.0
2025-04-18 13:23:41.327 [debug] unknown @ 0 - ao/pulse: Proto: 35
2025-04-18 13:23:41.327 [debug] unknown @ 0 - ao/pulse: Server proto: 4294967295
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: audio-exclusive=false -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: audio-device="auto" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: audio-normalize-downmix="yes" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: audio-swresample-o="surround_mix_level=1" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: audio-spdif="" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: audio-channels="2.0" -> 1
2025-04-18 13:23:41.327 [warning] unknown @ 0 - cplayer: Option af-remove: item label @ac3 not found.
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: video-sync="audio" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: hwdec="auto-copy" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: hwdec-image-format="no" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: deinterlace="no" -> 1
2025-04-18 13:23:41.327 [debug] unknown @ 0 - cplayer: Set property: display-fps-override=0.000000 -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: audio-delay=0.000000 -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: demuxer-max-bytes=78643200 -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: video-unscaled=false -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: video-aspect-override="-1" -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: keepaspect=true -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: panscan=0.000000 -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Done loading scripts.
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: sub-ass-style-overrides="ScaledBorderAndShadow=yes" -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: sub-font="sans-serif" -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: video-unscaled=false -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: video-aspect-override="-1" -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: keepaspect=true -> 1
2025-04-18 13:23:41.328 [debug] unknown @ 0 - cplayer: Set property: panscan=0.000000 -> 1
2025-04-18 13:23:41.328 [warning] unknown @ 0 - Could not find a taskbar component matching this platform. Taskbar functions disabled.
2025-04-18 13:23:41.341 [debug] unknown @ 0 - resize event: QSize(1280, 720)
2025-04-18 13:23:41.344 [debug] unknown @ 0 - cplayer: Set property: vo="libmpv" -> 1
2025-04-18 13:23:41.344 [debug] unknown @ 0 - cplayer: Set property: audio-device="auto" -> 1
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: GL_VERSION='4.5 (Compatibility Profile) Mesa 24.2.8-1ubuntu1~24.04.1'
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Detected desktop OpenGL 4.5.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: GL_VENDOR='Mesa'
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: GL_RENDERER='llvmpipe (LLVM 19.1.1, 256 bits)'
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: GL_SHADING_LANGUAGE_VERSION='4.50'
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Loaded extension GL_KHR_debug.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Detected suspected software renderer.
2025-04-18 13:23:43.839 [warning] unknown @ 0 - libmpv_render: Suspected software renderer or indirect context.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: GL_*_swap_control extension missing.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Testing FBO format rgba16f
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Using FBO format rgba16f.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Loading hwdec driver 'vaapi'
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render/vaapi: VAAPI hwdec only works with OpenGL or Vulkan backends.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Loading failed.
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render: Loading hwdec driver 'cuda'
2025-04-18 13:23:43.839 [debug] unknown @ 0 - libmpv_render/cuda: cu->cuGLGetDevices(&device_count, &display_dev, 1, CU_GL_DEVICE_LIST_ALL) failed -> CUDA_ERROR_INVALID_GRAPHICS_CONTEXT: invalid OpenGL or DirectX context
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render/cuda: CUDA hwdec only works with OpenGL or Vulkan backends.
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render: Loading failed.
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render: Loading hwdec driver 'drmprime'
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render/drmprime: drmprime hwdec requires at least one dmabuf interop backend.
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render: Loading failed.
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render: Loading hwdec driver 'drmprime-overlay'
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render/drmprime-overlay: Failed to retrieve DRM fd from native display.
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render: Loading failed.
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render: Loading hwdec driver 'vulkan'
2025-04-18 13:23:43.840 [debug] unknown @ 0 - libmpv_render/vulkan: This is not a libplacebo vulkan gpu api context.
2025-04-18 13:23:43.854 [debug] onLoadingChanged @ 181 - WebEngineLoadRequest starting: file:///usr/share/jellyfinmediaplayer/web-client/extension/find-webclient.html

ogra · April 18, 2025, 3:12pm

What does snappy-debug tell you when you run it in strict mode and it fails like this ?

loic.perrot · April 18, 2025, 4:31pm

Hi, this tool is amazing ! Here is its output :

loic@Vivobook:~/Documents/Snapcraft/Jellyfin$ sudo snappy-debug
INFO: Following '/var/log/syslog'. If have dropped messages, use:
INFO: $ sudo journalctl --output=short --follow --all | sudo snappy-debug
kernel.printk_ratelimit = 0
= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.newsflash.newsflash" name="/proc/zoneinfo" pid=3910 comm="PressureMonitor" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /proc/zoneinfo (read)
Suggestions:
* adjust program to not access '@{PROC}/zoneinfo'
* add 'system-observe' to 'plugs'

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=66661 comm="snap-confine" capability=12  capname="net_admin"
Capability: net_admin
Suggestions:
* adjust program to not require 'CAP_NET_ADMIN' (see 'man 7 capabilities')
* add one of 'bluetooth-control, firewall-control, netlink-audit, netlink-connector, network-control, qualcomm-ipc-router' to 'plugs'
* do nothing if using systemd utility (eg, timedatectl): https://forum.snapcraft.io/t/managing-time-date-and-timezone-in-ubuntu-core/408/44
* do nothing (https://launchpad.net/bugs/1465724)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=66661 comm="snap-confine" capability=38  capname="perfmon"
Capability: perfmon
Suggestions:
* adjust program to not require 'CAP_PERFMON' (see 'man 7 capabilities')
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap-update-ns.jellyfin" name="/proc/66682/maps" pid=66682 comm="snap-update-ns" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /proc/66682/maps (read)
Suggestion:
* adjust program to not access '@{PROC}/@{pid}/maps'

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/home/loic/Documents/" pid=66754 comm="head" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
File: /home/loic/Documents/ (read)
Suggestion:
* add 'home' to 'plugs'

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="jellyfinmediapl" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 203(sched_setaffinity) compat=0 ip=0x741427fcd6f1 code=0x50000
Syscall: sched_setaffinity
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional sched_setaffinity is often just noise)

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="jellyfinmediapl" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 141(setpriority) compat=0 ip=0x74142804762b code=0x50000
Syscall: setpriority
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional setpriority is often just noise)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/sys/bus/usb/devices/" pid=66661 comm="InputCEC" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/bus/usb/devices/ (read)
Suggestions:
* adjust program to not access '/sys/bus/usb/devices/'
* add one of 'camera, raw-usb' to 'plugs'

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/etc/pulse/client.conf" pid=66661 comm="core" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /etc/pulse/client.conf (read)
Suggestions:
* adjust program to read necessary files from $SNAP, $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON
* adjust snap to use snap layouts (https://forum.snapcraft.io/t/snap-layouts/7207)
* add one of 'audio-playback, pulseaudio (deprecated)' to 'plugs'

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="connect" class="file" profile="snap.jellyfin.jellyfin" name="/run/user/1000/pulse/native" pid=66661 comm="core" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
File: /run/user/1000/pulse/native (write)
Suggestions:
* adjust program to use $SNAP_DATA
* adjust program to use /run/shm/snap.$SNAP_NAME.*
* adjust program to use /run/snap.$SNAP_NAME.*
* adjust snap to use snap layouts (https://forum.snapcraft.io/t/snap-layouts/7207)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/etc/alsa/conf.d/" pid=66661 comm="core" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /etc/alsa/conf.d/ (read)
Suggestions:
* adjust program to read necessary files from $SNAP, $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON
* adjust snap to use snap layouts (https://forum.snapcraft.io/t/snap-layouts/7207)
* add 'system-files (see https://forum.snapcraft.io/t/the-system-files-interface for acceptance criteria)' to 'plugs'

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="jellyfinmediapl" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 141(setpriority) compat=0 ip=0x74142804762b code=0x50000
Syscall: setpriority
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional setpriority is often just noise)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/proc/66840/setgroups" pid=66840 comm="jellyfinmediapl" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
File: /proc/66840/setgroups (write)
Suggestions:
* adjust program to not access '@{PROC}/@{pid}/setgroups'
* add 'steam-support' to 'plugs'

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="mknod" class="file" profile="snap.jellyfin.jellyfin" name="/dev/shm/.org.chromium.Chromium.wXOcJD" pid=66661 comm="Chrome_IOThread" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.wXOcJD (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="Chrome_InProcGp" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 141(setpriority) compat=0 ip=0x74142804762b code=0x50000
Syscall: setpriority
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional setpriority is often just noise)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/a11y/bus" interface="org.freedesktop.DBus.Properties" member="Get" mask="send" name="org.a11y.Bus" pid=66661 label="snap.jellyfin.jellyfin" peer_pid=3535 peer_label="unconfined"
DBus access

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="Chrome_InProcGp" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 141(setpriority) compat=0 ip=0x74142804762b code=0x50000
Syscall: setpriority
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional setpriority is often just noise)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="mknod" class="file" profile="snap.jellyfin.jellyfin" name="/dev/shm/.org.chromium.Chromium.EEirH4" pid=66661 comm="jellyfinmediapl" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.EEirH4 (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/proc/66895/oom_score_adj" pid=66661 comm="ThreadPoolSingl" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
File: /proc/66895/oom_score_adj (write)
Suggestions:
* adjust program to not access '@{PROC}/@{pid}/oom_score_adj'
* do nothing if program otherwise works properly
* add one of 'browser-support, microstack-support' to 'plugs'

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="jellyfinmediapl" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 141(setpriority) compat=0 ip=0x74142804762b code=0x50000
Syscall: setpriority
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional setpriority is often just noise)

= Seccomp =
Time: 2025-04-18T18:2
Log: auid=1000 uid=1000 gid=1000 ses=3 subj=snap.jellyfin.jellyfin pid=66661 comm="ThreadPoolForeg" exe="/snap/jellyfin/x1/usr/bin/jellyfinmediaplayer" sig=0 arch=c000003e 141(setpriority) compat=0 ip=0x74142804762b code=0x50000
Syscall: setpriority
Suggestion:
* ignore the denial if the program otherwise works correctly (unconditional setpriority is often just noise)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="unlink" class="file" profile="snap.jellyfin.jellyfin" name="/dev/char/195:255" pid=66661 comm="QSGRenderThread" requested_mask="d" denied_mask="d" fsuid=1000 ouid=0
File: /dev/char/195:255 (write)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="symlink" class="file" profile="snap.jellyfin.jellyfin" name="/dev/char/507:0" pid=66661 comm="QSGRenderThread" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
File: /dev/char/507:0 (write)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="unlink" class="file" profile="snap.jellyfin.jellyfin" name="/dev/char/195:0" pid=66661 comm="QSGRenderThread" requested_mask="d" denied_mask="d" fsuid=1000 ouid=0
File: /dev/char/195:0 (write)

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.jellyfin.jellyfin" name="/sys/devices/pci0000:00/0000:00:01.1/0000:01:00.0/numa_node" pid=66661 comm="QSGRenderThread" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:01.1/0000:01:00.0/numa_node (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:01.1/0000:01:00.0/numa_node'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/numa_node'

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="mknod" class="file" profile="snap.jellyfin.jellyfin" name="/dev/shm/.org.chromium.Chromium.3lwhWP" pid=66661 comm="jellyfinmediapl" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.3lwhWP (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="mknod" class="file" profile="snap.jellyfin.jellyfin" name="/dev/shm/.org.chromium.Chromium.V6bPuW" pid=66661 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.V6bPuW (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/a11y/bus" interface="org.freedesktop.DBus.Properties" member="Get" mask="send" name="org.a11y.Bus" pid=66661 label="snap.jellyfin.jellyfin" peer_pid=3535 peer_label="unconfined"
DBus access

= AppArmor =
Time: 2025-04-18T18:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.newsflash.newsflash" name="/proc/zoneinfo" pid=3910 comm="PressureMonitor" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /proc/zoneinfo (read)
Suggestions:
* adjust program to not access '@{PROC}/zoneinfo'
* add 'system-observe' to 'plugs'

The preload plugin doesn’t change anything, nor does the system-observe interface. Errors about /dev/shm/ seem to be the main ones, but I do not know how to do the recommended adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*