From e0485ee582ee778494b7a7e729e896fad0f5d9e2 Mon Sep 17 00:00:00 2001
From: Brandon Dunne <brandon.dunne@ibm.com>
Date: Wed, 26 Feb 2025 18:25:29 -0500
Subject: [PATCH] Fix update-ca-trust error - p11-kit: couldn't make directory
 writable

Helpful discussion in https://bugzilla.redhat.com/show_bug.cgi?id=2241240

CP4AIOPS-11300
---
 container-assets/cmd | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/container-assets/cmd b/container-assets/cmd
index 602d56f..ebb80de 100755
--- a/container-assets/cmd
+++ b/container-assets/cmd
@@ -1,3 +1,9 @@
 #!/bin/bash
-update-ca-trust
+
+# Extract to a tmpdir to avoid: p11-kit: couldn't make directory writable: /etc/pki/ca-trust/extracted/pem/directory-hash: Unknown error 1
+mkdir /tmp/extracted
+update-ca-trust extract -o /tmp/extracted/
+rm -rf /etc/pki/ca-trust/extracted/*
+mv /tmp/extracted/* /etc/pki/ca-trust/extracted/
+
 exec /usr/sbin/httpd -D FOREGROUND -E /dev/stderr