use internal URLs for tarball retrieval