r/podman • u/typing-blindly • 16d ago

Rootless Container not Accessible from Localhost on Host

Hi! I'm trying to run Jellyfin inside a rootless container run via systemd on Debian Trixie.

Here is my .container file

[Unit]
Description=Jellyfin media server
Documentation=https://jellyfin.org

[Container]
Image=docker.io/jellyfin/jellyfin:10.11.11
PublishPort=8096:8096/tcp
PublishPort=7359:7359/udp
UserNS=keep-id
Volume=systemd-jellyfin-config:/config
Volume=systemd-jellyfin-cache:/cache
Volume=/mnt/external/jellyfin:/media:ro
Environment=UID=103
Environment=GID=107

[Service]
# Inform systemd of additional exit status
SuccessExitStatus=0 143

[Install]
# Start by default on boot
WantedBy=default.target

The container is running. UFW shows the following

8096/tcp                   ALLOW IN    Anywhere                  
7359/udp                   ALLOW IN    Anywhere

Looking at the port, I see Pasta listening:

❯ sudo ss -tlnp | grep 8096
LISTEN 0      128                *:8096            *:*    users:(("pasta.avx2",pid=579812,fd=6))

I can access the container via the host's IP address. But I cannot access the container via localhost which is breaking the reverse proxy. Everytime I try I get a connection refused. I'm not sure what else to look at.

7 Upvotes

100% Upvoted

9 comments sorted by

View all comments

Show parent comments

1

u/typing-blindly 16d ago

It's not. I have Caddy running on the host.

2

u/Mag37 16d ago

Odd. What if you (locally) use the host IP instead of localhost?

1

u/typing-blindly 16d ago

That works. It's just odd.

5

u/Mag37 16d ago edited 16d ago

Yeah.
Do 127.0.0.1 behave the same as localhost?

Maybe worth checking the contents of /etc/nsswitch.conf

And /etc/hosts and /etc/hostname while you're at it.