use tarball to preserve permissions