node-tar pack should allow the uid+gid to be overwritten

[dnwe]

A common use case when creating a tar is to override the source filesystem uid+gid with 0:0 when creating the tar entries, so that when the tar is extracted by a root user it will correctly be written with root:root as the owner/group, rather than inheriting the uid+gid stored with the .tgz

e.g.,

$ tar -zcv --owner=root --group=root --numeric-owner -f /tmp/filename.tgz package/
$ cd /tmp && sudo tar -zxf /tmp/filename.tgz
$ ls -l package/*
-rw-r--r-- 1 root root package/package.json
etc.

Currently if I create a tar using node-tar and distribute it to someone who untars it as root, the files will be written with whatever uid/gid my user happens to have on the machine on which I created the tar

[isaacs]

patch welcome, provided it comes along with a test and any API surface changes are documented.

[tamird]

Also affects JSPM jspm/jspm#1902.

[tamird]

Looks like this needs an upstream change as well, since the chmod is done in https://github.com/npm/fstream/blob/master/lib/writer.js#L194:L212.

[isaacs]

In v3, this will be possible by setting { preserveOwner: false } when extracting. (Or, to omit the uid/gid entirely, you can pack with { portable: true }.) Follow along at #108.

[isaacs]

v3 is shipped.