When you try to install Puppet Enterprise agent on nodes with McAfee Endpoint Security (ePO) or McAfee Agent installed, it fails with an
unpacking rpm cpio open error. A McAfee security policy prevents the creation of a hidden file and directory during installation.
You get errors similar to:
Error unpacking rpm package pe-installer-2019.8.6.0.29.g2151a35-1.redhatfips7.x86_64 error: unpacking of archive failed: cpio: lsetfilecon
Error: Could not update: Execution of '/bin/yum -d 0 -e 0 -y update pe-client-tools' returned
1: Error unpacking rpm package pe-client-tools-19.8.2-1.el7.x86_64 error: unpacking of archive failed on file /opt/puppetlabs/client-tools/lib/icu/current: cpio: rename failed - Is a directory pe-client-tools-18.1.4-1.el7.x86_64 was supposed to be removed but is not!
During installation, McAfee ePolicy Orchestrator (ePO) policy blocks the creation of a hidden directory and file at
/opt/puppetlabs/puppet/lib/ruby/gems/2.5.0/gems/ffi-1.13.1/ext/ffi_c/libffi-x86_64-linux/src/.deps/.dirstamp and installation fails.
Version and installation information
PE version: All supported versions
To install PE on these nodes, allow the hidden file and directory to be created by configuring a security exception in MacAfee ePO.
Note: We cannot troubleshoot third-party software. For assistance with MacAfee products, please contact McAfee Support.