diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8e8bf3ebcbe9..5f457a9ec235 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -45,6 +45,8 @@ Main (unreleased)
   was rolled back, resulting in "dropped sample for series that was not
   explicitly dropped via relabelling" log messages. (@rfratto)
 
+- Fix RPM file digests so that installation on FIPS-enabled systems succeeds. (@andrewimeson)
+
 ### Other changes
 
 - Compile journald support into builds of `grafana-agentctl` so
diff --git a/packaging/grafana-agent-flow/rpm/gpg-sign.sh b/packaging/grafana-agent-flow/rpm/gpg-sign.sh
index c33592d42f3d..7d84262c6cbb 100755
--- a/packaging/grafana-agent-flow/rpm/gpg-sign.sh
+++ b/packaging/grafana-agent-flow/rpm/gpg-sign.sh
@@ -18,6 +18,7 @@ echo "%_gpg_name Grafana Labs <engineering@grafana.com>
 %_gpg_path /root/.gnupg
 %_gpgbin /usr/bin/gpg
 %_gpg_digest_algo sha256
+%_binary_filedigest_algorithm 8
 %__gpg /usr/bin/gpg
 %__gpg_sign_cmd     %{__gpg} \
          gpg --no-tty --batch --yes --no-verbose --no-armor \
diff --git a/packaging/grafana-agent/rpm/gpg-sign.sh b/packaging/grafana-agent/rpm/gpg-sign.sh
index c33592d42f3d..7d84262c6cbb 100755
--- a/packaging/grafana-agent/rpm/gpg-sign.sh
+++ b/packaging/grafana-agent/rpm/gpg-sign.sh
@@ -18,6 +18,7 @@ echo "%_gpg_name Grafana Labs <engineering@grafana.com>
 %_gpg_path /root/.gnupg
 %_gpgbin /usr/bin/gpg
 %_gpg_digest_algo sha256
+%_binary_filedigest_algorithm 8
 %__gpg /usr/bin/gpg
 %__gpg_sign_cmd     %{__gpg} \
          gpg --no-tty --batch --yes --no-verbose --no-armor \