> How will we test that?

The final tar could be checked agains the rootfs tree generated
during the build using:

        tar --compare --file=archive-file.tar -C /some/where/

I am not sure if this is worth it though, as this will always work
unless tar itself made a mistake ... I think the recipe is trivial
enough that this check can be omitted.