- Arch: create the source tarball in /tmp to avoid file changed as we read it and exclude existing tarballs from the archive. - RPM: run the Fedora build inside docker instead of a job container so actions/checkout is not hampered by a missing Git in the base image.