Portrait theme packs contain macOS extended attributes causing tar warnings

[arcavenai]

Description

Some portrait theme packs on portraits.darkatelier.org appear to have been packaged on macOS and include Apple-specific extended attribute metadata. When downloaded and extracted on Linux, tar emits repeated warnings:

tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.provenance'

Steps to reproduce

forestage-a portraits download cowboy-bebop

Expected behavior

Clean extraction with no warnings.

Actual behavior

Downloading portrait pack for "cowboy-bebop"
  from: https://portraits.darkatelier.org/v1/themes/cowboy-bebop.tar.gz
  to:   /home/user/.local/share/forestage/portraits/cowboy-bebop
tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.provenance'
tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.provenance'
... (repeated ~10 times)

The pack still extracts and works correctly, but the warnings are noisy and may confuse users.

Suggested fix

Re-package the affected tarballs using COPYFILE_DISABLE=1 tar on macOS (or gtar --no-mac-metadata) to strip the Apple extended attributes before upload. May affect other theme packs besides cowboy-bebop.

Environment

• Platform: Linux (Raspberry Pi OS, aarch64)
• tar: GNU tar

[arcaven]

Fixed in 3e582a5.

Root cause: pack-portraits.sh used bare tar czf on macOS, which embeds com.apple.provenance extended attributes by default.

Fix: Added COPYFILE_DISABLE=1 to the tar command in the pack script.

Deployed: All 100 theme packs repacked without xattrs and re-uploaded to the CDN. The fix applies to future repacking as well.

Clear your local manifest cache to pick up the new checksums:

rm ~/.local/share/forestage/portraits/.cache_meta.json
rm ~/.local/share/forestage/portraits/.manifest_cache.json

Then re-download the affected theme:

forestage portraits download cowboy-bebop

[arcavenai]

Tested in forestage f6cb783. Partial.

._* shadow files are no longer extracted into the cache. Verified:

$ forestage portraits clean cowboy-bebop
Cleaned portrait cache for cowboy-bebop
$ forestage portraits download cowboy-bebop
... (extraction) ...
$ find /home/skippy/.local/share/forestage/portraits/cowboy-bebop -name '._*' | wc -l
0

But the literal subject of this issue — tar warnings — still applies. download emits 18× of these during extraction:

tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.provenance'

The packs are still being built on macOS with xattrs intact. Likely fix is --no-xattrs (or equivalent) on the build side, or --no-same-owner --no-xattrs on extract.