Add engine distribution check before unpacking (#13086)

- followup #12948
- followup #13045

Debugging issues during the unpacking engine distribution step:
```
tar: Unexpected EOF in archive
tar: rmtlseek not stopped at a record boundary
tar: Error is not recoverable: exiting now
```

Changelog:
- remove: retry unpacking the engine distribution
- update: check the engine distribution file before unpacking

Author: 4e6

.github/workflows/engine-checks-nightly.yml

@@ -357,11 +357,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run libraries lint
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -419,11 +422,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test jvm
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -493,11 +499,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, aarch64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test jvm
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -565,11 +574,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test jvm
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -638,11 +650,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (windows, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test jvm
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -711,11 +726,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (Oracle GraalVM) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test jvm
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -784,11 +802,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend stdlib-api-check
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -844,11 +865,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -921,11 +945,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, aarch64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -996,11 +1023,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1072,11 +1102,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (windows, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1148,11 +1181,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library-in-native
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1225,11 +1261,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, aarch64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library-in-native
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1300,11 +1339,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library-in-native
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1376,11 +1418,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (windows, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library-in-native
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1452,11 +1497,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (Oracle GraalVM) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -1528,11 +1576,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (Oracle GraalVM) (native,test) (linux, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library-in-native
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}

.github/workflows/engine-checks-optional.yml

@@ -120,11 +120,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test jvm
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -193,11 +196,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}
@@ -269,11 +275,14 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: Engine Distribution (GraalVM CE) (native,test) (macos, amd64)
+      - run: |-
+          ls -l built-distribution.tar
+          sha256sum built-distribution.tar
+        shell: bash
       - name: Unpack Engine Distribution
-        run: |
-          tar -xvf built-distribution.tar || tar -xvf built-distribution.tar;
+        run: |-
+          tar -xvf built-distribution.tar -C .
           rm built-distribution.tar
-        shell: bash
       - run: ./run backend test standard-library-in-native
         env:
           ENSO_LIB_S3_AWS_ACCESS_KEY_ID: ${{ secrets.ENSO_LIB_S3_AWS_ACCESS_KEY_ID }}