Lesson learned?  https repos come from "tarball"