diff --git a/bugfix-add-certs-to-initrd.patch b/bugfix-add-certs-to-initrd.patch
new file mode 100644
index 0000000000000000000000000000000000000000..65ff1b9569bdfada7a26ce2200354006d384d593
--- /dev/null
+++ b/bugfix-add-certs-to-initrd.patch
@@ -0,0 +1,25 @@
+From 7a02b38a7f060bbbc32bdada01381ea73fa4c9f2 Mon Sep 17 00:00:00 2001
+From: sun_hai_10 <sunhai10@h-partners.com>
+Date: Sat, 10 May 2025 23:39:07 +0800
+Subject: [PATCH] add certs to initrd
+
+---
+ src/pylorax/__init__.py | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/pylorax/__init__.py b/src/pylorax/__init__.py
+index 8700ff5..50b525e 100644
+--- a/src/pylorax/__init__.py
++++ b/src/pylorax/__init__.py
+@@ -58,7 +58,7 @@ except ImportError:
+ else:
+     vernum = pylorax.version.num
+ 
+-DRACUT_DEFAULT = ["--xz", "--install", "/.buildstamp", "--no-early-microcode", "--add", "fips"]
++DRACUT_DEFAULT = ["--xz", "--install", "/.buildstamp /etc/pki/tls/certs/ca-bundle.crt", "--no-early-microcode", "--add", "fips"]
+ 
+ # Used for DNF conf.module_platform_id
+ DEFAULT_PLATFORM_ID = "platform:f32"
+-- 
+2.33.0
+
diff --git a/lorax.spec b/lorax.spec
index 138db9af32ba88789cc6917c10bc07476d3548a2..60837eacb74c6b3998601f835b1045ce8b258df6 100644
--- a/lorax.spec
+++ b/lorax.spec
@@ -3,7 +3,7 @@
 
 Name:           lorax
 Version:        34.1
-Release:        7
+Release:        8
 Summary:        A set of tools used to create bootable images
 License:        GPLv2+
 URL:            https://github.com/weldr/lorax
@@ -31,6 +31,8 @@ Patch100:       0001-support-loongarch-for-lorax.patch
 Patch200:       0001-add-sw64-architecture.patch
 Patch300:       0001-support-riscv64-for-lorax.patch 
 
+Patch18:        bugfix-add-certs-to-initrd.patch
+
 BuildRequires:  python3-devel python3-sphinx_rtd_theme python3-magic 
 BuildRequires:  python3-pytest python3-pytest-mock python3-pocketlint python3-gevent
 BuildRequires:  python3-mock python3-urllib3 python3-dnf python3-librepo 
@@ -150,6 +152,8 @@ build images, etc. from the command line.
 %patch300 -p1
 %endif
 
+%patch18 -p1
+
 %build
 %make_build
 
@@ -234,6 +238,12 @@ getent passwd weldr >/dev/null 2>&1 || useradd -r -g weldr -d / -s /sbin/nologin
 %{_mandir}/man1/*.1*
 
 %changelog
+* Sat Aug 02 2025 sunhai <sunhai10@h-partners.com> - 34.1-8
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:add certs to initrd
+
 * Fri Dec 13 2024 liweigang <liweigang.lwg@gmail.com> - 34.1-7
 - Clean spec