Podman container fails to start

[Cutter]

Hello,
I'm trying to run JF in a rootless podman container run as a systemd service.

The systemd .container file is here: https://pastebin.com/kXnpKvMY

The container fails at startup with the following errors:

Code:

podman[16551]: 2025-05-02 21:30:32.028014661 +0200 CEST m=+0.033189108 image pull bb8553ab0efe4b205734408fbd790684dfba22985f1fdef43453ba055fbb2339 docker.io/jellyfin/jellyfin:latest
mai 02 21:30:32 LPP47MT conmon[16567]: conmon eb520c8285e7d5ab3a65 <nwarn>: runtime stderr: the path `/jellyfin/jellyfin` exists but it is not executable: Operation not permitted
mai 02 21:30:32 LPP47MT conmon[16567]: conmon eb520c8285e7d5ab3a65 <error>: Failed to create container: exit status 1
mai 02 21:30:32 LPP47MT podman[16551]: 2025-05-02 21:30:32.599086769 +0200 CEST m=+0.604261208 container remove eb520c8285e7d5ab3a65a999dbdcf7b2dcbcf89cda3bcc1896ba50229dbf8aa7 (image=docker.io/jellyfin/jellyfin:latest, name=jellyfin, PODMAN_SYSTEMD_UNIT=jellyfin.service, org.opencontainers.image.description=The Free Software Media System, org.opencontainers.image.documentation=https://jellyfin.org/docs/, org.opencontainers.image.source=https://github.com/jellyfin/jellyfin-packaging, org.opencontainers.image.title=Jellyfin, org.opencontainers.image.url=https://jellyfin.org, org.opencontainers.image.version=10.10.7)>
mai 02 21:30:32 LPP47MT jellyfin[16551]: [b][color=#ff4136]Error: crun: the path `/jellyfin/jellyfin` exists but it is not executable: Operation not permitted: OCI permission denied[/color][/b]
mai 02 21:30:32 LPP47MT systemd[1294]: jellyfin.service: Main process exited, code=exited, status=126/n/a
mai 02 21:30:32 LPP47MT systemd[1294]: jellyfin.service: Killing process 16567 (conmon) with signal SIGKILL.
mai 02 21:30:32 LPP47MT systemd[1294]: jellyfin.service: Failed with result 'exit-code'.
mai 02 21:30:32 LPP47MT systemd[1294]: Failed to start jellyfin.service - Jellyfin Media Server (Podman container).
mai 02 21:30:32 LPP47MT systemd[1294]: jellyfin.service: Consumed 1.321s CPU time, 33.9M memory peak.

It worked fine until now. Either it broke itself by trying to update the image, or I broke things by running the command

Code:

sudo -R chmod ugo-x,ugo+X /var/lib/jellyfin

Where to find the /jellyfin/jellyfin dir inside the container to fix the permissions ? It does not exist at this location on the host.

[Cutter]

I removed the image, forcing it to redownload a new one. Jellyfin starts again. I disabled AutoUpdates for now. I would like to check that the /jellyfin/jellyfin dir is executable before enabling AutoUpdates.