diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9e88428..6fe1b5f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -64,6 +64,7 @@ jobs:
             libtinfo5 \
             rpm \
             cpio \
+            libarchive-tools \
             desktop-file-utils \
             xdg-utils
       - run: npm ci
diff --git a/scripts/verify-linux-packages.js b/scripts/verify-linux-packages.js
index d0accb3..4d5682d 100644
--- a/scripts/verify-linux-packages.js
+++ b/scripts/verify-linux-packages.js
@@ -123,7 +123,13 @@ function extractDeb(packageFile, destination) {
 
 function extractRpm(packageFile, destination) {
   fs.mkdirSync(destination, { recursive: true });
-  run('bash', ['-o', 'pipefail', '-c', 'rpm2cpio "$1" | (cd "$2" && cpio --no-absolute-filenames -idm --quiet)', '--', packageFile, destination]);
+  run('bsdtar', [
+    '--extract',
+    '--file', packageFile,
+    '--directory', destination,
+    '--no-same-owner',
+    '--no-same-permissions',
+  ]);
 }
 
 function readPayloadManifest(root, label) {