common: use xz instead of gzip for tarballs