apply_extra script failed with org.freedesktop.Platform.GL.nvidia-545-29-06

[greg0ire]

Trying to install org.freedesktop.Platform.GL.nvidia-545-29-06 results in an error:

$ flatpak install org.freedesktop.Platform.GL.nvidia-545-29-06
Looking for matches…


        ID                                                       Branch             Op            Remote             Download
 1. [✗] org.freedesktop.Platform.GL.nvidia-545-29-06             1.4                i             flathub            324.7 MB / 325.6 MB

Warning: Cannot create repo on revokefs mountpoint /var/tmp/flatpak-cache-KTV4E2/org.freedesktop.Platform.GL.nvidia-545-29-06-SUFFF2: mkdirat: Input/output error
Error: Error deploying: While trying to apply extra data: apply_extra script failed, exit status 256
error: Failed to install org.freedesktop.Platform.GL.nvidia-545-29-06: Error deploying: While trying to apply extra data: apply_extra script failed, exit status 256

Not sure how to debug this further.

[zoibot]

I don't have much helpful to add here, but I'm getting the exact same error.
The script looks like it should output an error when it fails but I haven't been able to figure out where it goes.
Digging around in the logs I found this error but I'm not sure what to do about it. I can see this directory being created briefly while the installation is happening. Not sure if this is actually the issue or just a symptom of cleaning up after the script fails.
bwrap: Can't find source path /home/zoibot/.local/share/parallel-launcher/retroarch/runtime/org.freedesktop.Platform.GL.nvidia-545-29-06/x86_64/1.4/.bd4bbd9aa3c80827950a820d65c5be4872612cb8acd114c662c20ece51e2b63a-s8CS9o/files: Permission denied

[zoibot]

This feels more like a workaround than an actual solution but based on that error and https://forums.gentoo.org/viewtopic-p-8685542.html?sid=37a2dde71e35041bb19c0974251afe34 I tried setting the suid bit on bwrap (I'm on arch so this was installing the bubblewrap-suid package) and then the update succeeded. Everything I can find seems to indicate that this shouldn't be necessary unless you're using a kernel with CONFIG_USER_NS_UNPRIVILEGED turned off, and I'm not, so I don't know why this worked.

Also, the reason that bwrap error was so hard to find in the first place was because of flatpak/flatpak#4205. It does show up while the update is running but gets quickly overwritten.