I use MediaElch which is helpful, but this is still POST process. At this point, I have already had to manually identify every track on the disk and rip it first.
What I want, is something like we have in music, where the disc is recognized via a discdb, and each of the tracks on the disc are identified ahead of time, so when ripping, you know which tracks to extract, and can have them already named appropriately.
This would be really useful for TV episodes, where the episodes are not necessarily in track order (I watched Severance out of order for the first half of season 1 because the blu-ray had track 1 as Episode 3, track 2 as Episode 2, and track 3 as Episode 1 which wasn't obvious!)
Oh boy. While I would recommend using flatpak or bwrap if you want a sandbox, my guess is you probably need to give the container access to the devices in /dev, like:
or
You might also need to make sure the user inside the container actually has access to that device.
I'd suggest looking at Jellyfin's Hardware Acceleration Docs since it goes into detail on getting hardware acceleration working within docker.