Suhosin blocks the phar file, see http://cweiske.de/tagebuch/suhosin-phar.htm
Solution: Whitelist the phar protocol:
$ emacs /etc/php5/cli/conf.d/suhosin.ini
.. add the following line:
suhosin.executor.include.whitelist = phar
This is explained on the composer site btw.