From 8f4e39c72e41c8a307db2cff4e7cf9f6e630e3e2 Mon Sep 17 00:00:00 2001
From: nlf <quitlahok@gmail.com>
Date: Tue, 21 Feb 2023 10:50:10 -0800
Subject: [PATCH] fix: always ignore ownership from tar headers (#261)

---
 lib/fetcher.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/fetcher.js b/lib/fetcher.js
index fe5679f0..4852564d 100644
--- a/lib/fetcher.js
+++ b/lib/fetcher.js
@@ -425,7 +425,7 @@ class FetcherBase {
     return ((mode | m) & ~this.umask) | exe | 0o600
   }
 
-  [_tarxOptions] ({ cwd, uid, gid }) {
+  [_tarxOptions] ({ cwd }) {
     const sawIgnores = new Set()
     return {
       cwd,
@@ -460,9 +460,9 @@ class FetcherBase {
         log.warn('tar', code, msg)
         log.silly('tar', code, msg, data)
       },
-      uid,
-      gid,
       umask: this.umask,
+      // always ignore ownership info from tarball metadata
+      preserveOwner: false,
     }
   }
 }