Failed to install terraform on CentOS 8

Terraform
1 
Adding repo from: https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
Hashicorp Stable - x86_64                                                                                                                    530 kB/s | 506 kB     00:00    
Dependencies resolved.
=============================================================================================================================================================================
 Package                                   Architecture                           Version                                    Repository                                 Size
=============================================================================================================================================================================
Installing:
 terraform                                 x86_64                                 1.0.1-1                                    hashicorp                                  26 M
 
Transaction Summary
=============================================================================================================================================================================
Install  1 Package
 
Total download size: 26 M
Installed size: 77 M
Downloading Packages:
terraform-1.0.1-1.x86_64.rpm                                                                                                                 5.4 MB/s |  26 MB     00:04    
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                        5.4 MB/s |  26 MB     00:04    
warning: /var/cache/dnf/hashicorp-164999f2fbadbd87/packages/terraform-1.0.1-1.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID a3219f7b: NOKEY
Hashicorp Stable - x86_64                                                                                                                     11 kB/s | 3.1 kB     00:00    
Importing GPG key 0xA3219F7B:
 Userid     : "HashiCorp Security (HashiCorp Package Signing) <security+packaging@hashicorp.com>"
 Fingerprint: E8A0 32E0 94D8 EB4E A189 D270 DA41 8C88 A321 9F7B
 From       : https://rpm.releases.hashicorp.com/gpg
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                     1/1
  Installing       : terraform-1.0.1-1.x86_64                                                                                                                            1/1
Error unpacking rpm package terraform-1.0.1-1.x86_64
  Verifying        : terraform-1.0.1-1.x86_64                                                                                                                            1/1
 
Failed:
  terraform-1.0.1-1.x86_64                                                                                                                                                  
 
Error: Transaction failed

please advice

thanks

Eli Mesika
Redhat

2

Trying to download and install teh package with rpm fails as well but gave more information

(cpio: Digest mismatch)

rpm -i terraform-1.0.1-1.x86_64.rpm
error: unpacking of archive failed on file /usr/bin/terraform;60dafa8b: cpio: Digest mismatch

3

Hi, is someone looking at this? TBH this looks pretty serious - on one hand it may be a simple RPM build mistake, on the other, if the digest doesn’t match, someone may be tampering with your RPMs…

4

Yes, currently I am installing it with rpm and ignoring the checksum issue using the --nofiledigest flag , but I can not tell that this is considered as best practice.

I will be glad that this issue will be fixed since the above workaround is not secure.