From 56b4c9f5119a3c1b52c0494eee87332c7561eb40 Mon Sep 17 00:00:00 2001
From: NimBold <NimBold@users.noreply.github.com>
Date: Sun, 12 Jul 2026 11:31:52 +0330
Subject: [PATCH] fix(release): extract RPM packages with bsdtar

---
 .github/workflows/release.yml    | 1 +
 scripts/verify-linux-packages.js | 8 +++++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9e88428..6fe1b5f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -64,6 +64,7 @@ jobs:
             libtinfo5 \
             rpm \
             cpio \
+            libarchive-tools \
             desktop-file-utils \
             xdg-utils
       - run: npm ci
diff --git a/scripts/verify-linux-packages.js b/scripts/verify-linux-packages.js
index d0accb3..4d5682d 100644
--- a/scripts/verify-linux-packages.js
+++ b/scripts/verify-linux-packages.js
@@ -123,7 +123,13 @@ function extractDeb(packageFile, destination) {
 
 function extractRpm(packageFile, destination) {
   fs.mkdirSync(destination, { recursive: true });
-  run('bash', ['-o', 'pipefail', '-c', 'rpm2cpio "$1" | (cd "$2" && cpio --no-absolute-filenames -idm --quiet)', '--', packageFile, destination]);
+  run('bsdtar', [
+    '--extract',
+    '--file', packageFile,
+    '--directory', destination,
+    '--no-same-owner',
+    '--no-same-permissions',
+  ]);
 }
 
 function readPayloadManifest(root, label) {