From 42ca8ed6b2578d277e264d4fe39a4c67b86d6c3b Mon Sep 17 00:00:00 2001
From: Wei Zhou <weizhou@apache.org>
Date: Wed, 6 Nov 2024 16:35:49 +0100
Subject: [PATCH] systemvm: fix keystore is reset when patch a systemvm

---
 systemvm/patch-sysvms.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/systemvm/patch-sysvms.sh b/systemvm/patch-sysvms.sh
index 554218c98781..dfe39fd8e004 100644
--- a/systemvm/patch-sysvms.sh
+++ b/systemvm/patch-sysvms.sh
@@ -122,6 +122,9 @@ patch_systemvm() {
     echo "Restored keystore file and certs using backup" >> $logfile 2>&1
   fi
 
+  # Import global cacerts into 'cloud' service's keystore
+  keytool -importkeystore -srckeystore /etc/ssl/certs/java/cacerts -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore -srcstorepass changeit -deststorepass vmops.com -noprompt || true
+
   update_checksum $newpath/cloud-scripts.tgz
 
   if [ "$TYPE" == "consoleproxy" ] || [ "$TYPE" == "secstorage" ] || [[ "$TYPE" == *router ]]; then