Bug: unsquashfs fails to extract Widevine in distrobox/podman container

[baconicsynergy]

I am a huge fan. I hope I can help assist in bringing this installer to more aarch64 computers with this report, and formally document this occurrence for others who encounter this issue.

Host: postmarketOS v24.06 running on metal on the Pinephone v1.2
Guest: Debian 12 (Bookworm) running via rootless Distrobox/Podman, replicated in Fedora 40.

I am running the widevine-installer script within the Debian container for proper glibc support. This is the currently recommended method of installing Widevine on musl systems like pmOS (https://wiki.postmarketos.org/wiki/Widevine) and many have achieved success, or I wouldn't be wasting your time with this bug report.

The script works fine up until it invokes unsquashfs, at which point several permissions errors pop up:

Extracting Widevine...

set_attributes: failed to change uid and gids on squashfs-root/WidevineCdm/LICENSE, because Operation not permitted
[================================/               ] 31/45  68%
set_attributes: failed to change uid and gids on squashfs-root/WidevineCdm/_platform_specific/cros_arm64/libwidevinecdm.so, because Operation not permitted

set_attributes: failed to change uid and gids on squashfs-root/WidevineCdm/_platform_specific/cros_arm64, because Operation not permitted

set_attributes: failed to change uid and gids on squashfs-root/WidevineCdm/_platform_specific, because Operation not permitted

set_attributes: failed to change uid and gids on squashfs-root/WidevineCdm/manifest.json, because Operation not permitted

set_attributes: failed to change uid and gids on squashfs-root/WidevineCdm, because Operation not permitted

set_attributes: failed to change uid and gids on squashfs-root, because Operation not permitted

If I had to make a guess, I would imagine the tmpfs permissions between the host and the container are a little funky.

I want to help as best as I can, so I'll be standing by with my pinephone to test things out.