return err
			}
			// work around some weirdness, without this we wind up with just the basename
			header.Name = dest
			if isDir {
				header.Name = filepath.Join(dest, rel)
			}

			if IsExecOwner(info.Mode()) {
				header.Mode = 0o755
			} else {
				header.Mode = 0o644
			}
			header.Uid = 0
			header.Gid = 0

			// TODO: if we want reproducible builds we can fake the timestamps here