updater: check for tar and gunzip using which