oakcroissant

I thought macvlans were only available to rootful Podman?

I think VAAPI is still how the gpu is accessed but you can use the intel libva driver (vaapi) or the intel media driver (QSV) (arch wiki page). If I’m interpreting this all correctly.

I believe you want to use QSV (VAAPI is there for older processors IIRC).

For running as rootless, you could try adding group-add keep-groups (an explanation from Redhat about keep-groups).