Installing Puppet Enterprise on nodes with McAfee Endpoint Security or McAfee Agent fails with an unpacking rpm cpio open error

When you try to install Puppet Enterprise agent on nodes with McAfee Endpoint Security (ePO) or McAfee Agent installed, it fails with an unpacking rpm cpio open error. A McAfee security policy prevents the creation of a hidden file and directory during installation.

Error messages

You get errors similar to:

Error unpacking rpm package pe-installer-2019.8.6.0.29.g2151a35-1.redhatfips7.x86_64

error: unpacking of  archive failed: cpio: lsetfilecon

Error: Could not update: Execution of '/bin/yum -d 0 -e 0 -y update pe-client-tools' returned 1: Error unpacking rpm package pe-client-tools-19.8.2-1.el7.x86_64

error: unpacking of archive failed on file /opt/puppetlabs/client-tools/lib/icu/current: cpio: rename failed - Is a directory

pe-client-tools-18.1.4-1.el7.x86_64 was supposed to be removed but is not!

During installation, McAfee ePolicy Orchestrator (ePO) policy blocks the creation of a hidden directory and file at /opt/puppetlabs/puppet/lib/ruby/gems/2.5.0/gems/ffi-1.13.1/ext/ffi_c/libffi-x86_64-linux/src/.deps/.dirstamp and installation fails.

Version and installation information

PE version: All supported versions

Solution

To install PE on these nodes, allow the hidden file and directory to be created by configuring a security exception in MacAfee ePO.

Note: We cannot troubleshoot third-party software. For assistance with MacAfee products, please contact McAfee Support.

Learn more about configuring exclusions.