This is an automated email from the ASF dual-hosted git repository.
weizhou pushed a commit to branch 4.20
in repository https://gitbox.apache.org/repos/asf/cloudstack.git
The following commit(s) were added to refs/heads/4.20 by this push:
new 0cbebbdddda kvm: Fix for No VMs start after Renew Host Security Keys
due to wrong qemu group reading (#11632)
0cbebbdddda is described below
commit 0cbebbddddab9944747cc57773f79a0dcfbd81ea
Author: StepBee <[email protected]>
AuthorDate: Mon Sep 15 14:23:06 2025 +0200
kvm: Fix for No VMs start after Renew Host Security Keys due to wrong qemu
group reading (#11632)
* fix getting qemu group from config
* Update scripts/util/keystore-cert-import
Simplify and correct qemu group extraction from configfile
Co-authored-by: Wei Zhou <[email protected]>
---------
Co-authored-by: Wei Zhou <[email protected]>
---
scripts/util/keystore-cert-import | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/scripts/util/keystore-cert-import
b/scripts/util/keystore-cert-import
index a7523ca51e2..a9465f273a3 100755
--- a/scripts/util/keystore-cert-import
+++ b/scripts/util/keystore-cert-import
@@ -122,7 +122,7 @@ if [ -f "$LIBVIRTD_FILE" ]; then
ln -sf /etc/pki/libvirt/private/serverkey.pem
/etc/pki/libvirt-vnc/server-key.pem
cloudstack-setup-agent -s > /dev/null
- QEMU_GROUP=$(sed -n 's/^group=//p' /etc/libvirt/qemu.conf | awk -F'"'
'{print $2}' | tail -n1)
+ QEMU_GROUP=$(sed -n 's/^group\s*=//p' /etc/libvirt/qemu.conf | tr -d '"' |
tr -d ' ' | tr -d "'" | tail -n1)
if [ ! -z "${QEMU_GROUP// }" ]; then
chgrp $QEMU_GROUP /etc/pki/libvirt /etc/pki/libvirt-vnc /etc/pki/CA
/etc/pki/libvirt/private /etc/pki/libvirt/servercert.pem
/etc/pki/libvirt/private/serverkey.pem /etc/pki/CA/cacert.pem
/etc/pki/libvirt-vnc/ca-cert.pem /etc/pki/libvirt-vnc/server-cert.pem
/etc/pki/libvirt-vnc/server-key.pem
chmod 750 /etc/pki/libvirt /etc/pki/libvirt-vnc /etc/pki/CA
/etc/pki/libvirt/private /etc/pki/libvirt/servercert.pem
/etc/pki/libvirt/private/serverkey.pem /etc/pki/CA/cacert.pem
/etc/pki/libvirt-vnc/ca-cert.pem /etc/pki/libvirt-vnc/server-cert.pem
/etc/pki/libvirt-vnc/server-key.pem
