I've verified that unzip is available on the nodes that will ultimately run this code, but I don't see anything in Puppet which guarantees this to be true.  It's likely that the package is installed as part of our standard kickstart, but I'll add something to Puppet anyway.