CopyWithTar is a wrapper around the docker pkg/archive/copy CopyWithTar function allowing unprivileged use.

CopyWithTarWithRoots copies files as with CopyWithTar, but uses a custom ar.Untar which checks that hard link / symlink targets are under dstRoot, and not dst.

Unpack unpacks the decompressedArchive to dest with options.