fetchTarball downloads the given URL, unpacks it, and returns the Nix store path containing the unpacked tree. The file must be a tarball, ideally one with a single directory at the top level.

The function can also take a sha256 attribute containing a sha256 hash of the unpacked contents of the URL. This can be obtained using nix-prefetch-url with the --unpack flag.