DVB Device to Jailmaker Docker Container

[MysteryDash]

Hello,
I am trying to make transition from TrueCharts to Jailmaker, with the hope of easily transitioning from Jailmaker once the new TrueNAS upgrade is available.
However, one of the applications I am relying on is TVHeadend, which does not properly detect my TV Tuners. With TrueCharts it was already a pain because I had to figure out the following two elements:

• Adding the device (a QuadHD tuner) to the list of devices to passthrough (easy).
• Adding the firmware to the host from Hauppauge (hard), but in a nutshell you download the firmware for your tuner, and copy it to /lib/firmware on the host (needs to be done after each OS update).

This was enough to make it work previously, but here, because it is a systemd-nspawn, there seems to be more work required to make things work.

• The device is passed to systemd-nspawn and to TVHeadend and visible with ls /dev/dvb ;
• Access permissions should not be an issue, as they are exactly the same as with my previous TVHeadend instance (568:568 for the running process)
• /lib/firmware inside of both systemd-nspawn and the container are empty, but I suppose this is to be expected, I tried to bind both without seeing any difference
• I have tried to give the systemd-nspawn capabilities=all but it does not seem to have any impact as well

Would you guys know what I missed there?

[MysteryDash]

Okay I actually ended up finding the answer... lack of permissions from 568:568 (user needs to have access to the video group). The quick solution is to not set the user and use the default one from the container (which does not run as root to begin with). So this is not a Jailmaker-related issue.
Sorry about that!

This also means, by the way:

• No need for capabilities=ALL
• No need to forward /lib/firmware
• Bind /dev/dvb to systemd-nspawn, use a device bind for docker, and you're good to go.