From 35fe19f096dd38987bd1f892c78e9cce42c05c49 Mon Sep 17 00:00:00 2001
From: Wei Zhou <weizhou@apache.org>
Date: Mon, 13 Jan 2025 09:40:12 +0100
Subject: [PATCH] systemvm: fix keystore is reset when patch a systemvm (#9900)

---
 systemvm/patch-sysvms.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/systemvm/patch-sysvms.sh b/systemvm/patch-sysvms.sh
index 554218c9878..dfe39fd8e00 100644
--- a/systemvm/patch-sysvms.sh
+++ b/systemvm/patch-sysvms.sh
@@ -122,6 +122,9 @@ patch_systemvm() {
     echo "Restored keystore file and certs using backup" >> $logfile 2>&1
   fi
 
+  # Import global cacerts into 'cloud' service's keystore
+  keytool -importkeystore -srckeystore /etc/ssl/certs/java/cacerts -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore -srcstorepass changeit -deststorepass vmops.com -noprompt || true
+
   update_checksum $newpath/cloud-scripts.tgz
 
   if [ "$TYPE" == "consoleproxy" ] || [ "$TYPE" == "secstorage" ] || [[ "$TYPE" == *router ]]; then