HVEC encoding not working on Rockchip VPU

[ThatOMVrockchipMen]

I'm running my Jellyfin server on a RK3588 and since today I got hardware decoding working (Jellyfin page). However I've some 4K movies with the HEVC codec which give a fatal error during playback. I've searched the forum for a similar scenario and found a couple, such as https://forum.jellyfin.org/t-how-do-i-fi...light=HVEC and https://forum.jellyfin.org/t-solved-rk35...celeration , among others. I tried different video formats and sizes, but HVEC is the one not playing.
So I tried transcoding 10 seconds of the HVEC video to see if that would make a difference. It didn't for HVEC 8/10bit in MKV format, however, when transcoded to a HVEC format in the mp4 container, the video did play with video decoding!

However I'm no closer to finding a solution for playing HVEC video's in mkv format, and there seem to be more questions than answers...

Jellyfin compose file

Code:

services:
  jellyfin:
    image: lscr.io/linuxserver/jellyfin:latest
    container_name: jellyfin
    environment:
      - PUID=1004
      - PGID=100
      - TZ=${TIME_ZONE_VALUE}
      - JELLYFIN_PublishedServerUrl=192.168.x.xxx
    volumes:
      - ${PATH_TO_APPDATA}/jellyfin/config:/config
      - ${PATH_TO_MEDIA}:/media
    devices:
      - /dev/dma_heap:/dev/dma_heap
      - /dev/dri:/dev/dri
      - /dev/mpp_service:/dev/mpp_service
      - /dev/rga:/dev/rga
      - dev/mali0:/dev/mali0
    ports:
      - 8096:8096
    restart: unless-stopped

logfile, trying to play a 4K HVEC file.
https://pastebin.com/33gZjxDX
to get in use: snJzD3XF7t

[gnattu]

You have to use root to run the container unless you want to do much more complicated setups.

[nyanmisaka]

Run container as root or add these to the docker compose file:

Code:

security_opt:
  - apparmor=unconfined
  - systempaths=unconfined

[ThatOMVrockchipMen]

Thanks for the replies! Running as root, using "user: root" in the docker compose file didn't solve the problem for me. Maybe I did something wrong. I placed it on the same indent as 'image:'.

However, the solution suggested by @nyanmisaka did the trick!
The HVEC video's I encountered not playing to now play perfectly in the few tests I did. Thanks again for the support

Code:

services:
  jellyfin:
    security_opt:
      - apparmor=unconfined
      - systempaths=unconfined
    image: lscr.io/linuxserver/jellyfin:latest
    ...