write rootfs as tar rather than extracting

the expanded tar cannot be streamed in as it required mknod. perhaps
warden-linux should do this as root anyway?