diff --git a/Vagrantfile.centos7 b/Vagrantfile.centos7
index 7342e4ab1..68ae9f0e9 100644
--- a/Vagrantfile.centos7
+++ b/Vagrantfile.centos7
@@ -12,6 +12,8 @@ Vagrant.configure("2") do |config|
     v.cpus = 2
   end
   config.vm.provision "shell", inline: <<-SHELL
+    set -e -u -o pipefail
+
     # configuration
     GO_VERSION="1.13.11"
     BATS_VERSION="v1.2.0"
diff --git a/Vagrantfile.fedora32 b/Vagrantfile.fedora32
index 6b3dc652e..b72954abd 100644
--- a/Vagrantfile.fedora32
+++ b/Vagrantfile.fedora32
@@ -13,13 +13,18 @@ Vagrant.configure("2") do |config|
     v.cpus = 2
   end
   config.vm.provision "shell", inline: <<-SHELL
-    cat << EOF | dnf -y shell
+    set -e -u -o pipefail
+    # Work around dnf mirror failures by retrying a few times
+    for i in $(seq 0 2); do
+      sleep $i
+      cat << EOF | dnf -y shell && break
 config exclude kernel,kernel-core
 config install_weak_deps false
 update
 install iptables gcc make golang-go libseccomp-devel bats jq git-core criu skopeo
 ts run
 EOF
+    done
     dnf clean all
 
     # Add a user for rootless tests