# Docker Compose TLS installation failed

**URL:** <https://community.temporal.io/t/docker-compose-tls-installation-failed/7895>\
**Category:** Community Support\
**Created:** [April 13, 2023, 3:02am UTC](https://community.temporal.io/t/docker-compose-tls-installation-failed/7895 "2023-04-13T03:02:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![baxiaoshi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/baxiaoshi/32/648_2.png) [@baxiaoshi](https://community.temporal.io/u/baxiaoshi)\
**Post date:** [April 13, 2023, 3:02am UTC](https://community.temporal.io/t/docker-compose-tls-installation-failed/7895/1 "2023-04-13T03:02:45Z")

</div>

```auto
[root@VM-0-9-centos docker-compose]# pwd
/root/docker-compose
[root@VM-0-9-centos docker-compose]# ./tls/run-tls.sh

```

The following error occurred

```auto
Step 4/4 : RUN update-ca-certificates
 ---> Running in 626b030fdc69
Failed to open temporary file /etc/ssl/certs/bundleXXXXXX for ca bundle
The command '/bin/bash -c update-ca-certificates' returned a non-zero code: 1
ERROR: Service 'temporal-admin-tools' failed to build

```

---

<div class="post-metadata">

**Author:** ![tihomir](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/tihomir/32/6580_2.png) [@tihomir](https://community.temporal.io/u/tihomir)\
**Post date:** [April 13, 2023, 4:27am UTC](https://community.temporal.io/t/docker-compose-tls-installation-failed/7895/2 "2023-04-13T04:27:02Z")

</div>

What user are you running as, does it have permission to read from /etc/ssl/certs/?

---

<div class="post-metadata">

**Author:** ![baxiaoshi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/baxiaoshi/32/648_2.png) [@baxiaoshi](https://community.temporal.io/u/baxiaoshi)\
**Post date:** [April 13, 2023, 7:53am UTC](https://community.temporal.io/t/docker-compose-tls-installation-failed/7895/3 "2023-04-13T07:53:26Z")

</div>

> <https://github.com/temporalio/docker-compose/blob/main/tls/Dockerfile.admin-tools-tls>

By adding the USER root configuration, the problem is resolved.

---

<div class="post-metadata">

**Author:** ![barrownicholas](https://avatars.discourse-cdn.com/v4/letter/b/9e8a1a/32.png) [@barrownicholas](https://community.temporal.io/u/barrownicholas)\
**Post date:** [June 14, 2023, 2:07am UTC](https://community.temporal.io/t/docker-compose-tls-installation-failed/7895/4 "2023-06-14T02:07:24Z")

</div>

@baxiaoshi can you explain a bit more how you solved this? I’m running into the same issue. How/where did you add a user root configuration, i.e. how can I replicate your fix.

Edit:

It looks (possibly) like you did something like this (adding a `USER root`):

```auto
ARG BASEIMAGE
FROM temporalio/${BASEIMAGE}

USER root

COPY ./.pki/ca.pem /usr/local/share/ca-certificates/ca.crt

RUN update-ca-certificates

```