Tarring up the package would work fine. You can also go to /acs-admin/apm, click on your package and scroll down to the link 'Generate a distribution file for this package from the filesystem' which will create an .apm file (which is basically a tarball).
Getting the data from the database is different. Since your package data is tied to your openacs kernel, I can't think of a way to transfer that from one system to another without either:
- transferring a dump of your whole database
- writing a
procedure to export your data as SQL or CSV which could be imported into
your friend's package after they install it