# Trouble bootstrapping with RDS --- could not open certificate file

**URL:** <https://meta.discourse.org/t/trouble-bootstrapping-with-rds-could-not-open-certificate-file/289367>\
**Category:** Self-hosting\
**Created:** [December 20, 2023, 8:24pm UTC](https://meta.discourse.org/t/trouble-bootstrapping-with-rds-could-not-open-certificate-file/289367 "2023-12-20T20:24:13Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)\
**Post date:** [December 20, 2023, 8:24pm UTC](https://meta.discourse.org/t/trouble-bootstrapping-with-rds-could-not-open-certificate-file/289367/1 "2023-12-20T20:24:14Z")

</div>

I’ve got a pretty [standard install](https://meta.discourse.org/t/142537?silent=true) with databse on RDS. It was on 13.2 and I just upgraded it to 15.2. The existing container is working just fine.

When I bootstrap a new image, it migrates the database, precompiles assets

and then

```plaintext
                                                                                                                                                                            
I, [2023-12-20T20:16:12.865112 #1] INFO -- : > cd /var/www/discourse && sudo -E -u discourse bundle exec rake s3:upload_assets                                              
Plugin name is 'discourse-linkedin-auth', but plugin directory is named 'discourse-plugin-linkedin-auth'                                                                     
Plugin name is 'stemaway-experience-bbcodes', but plugin directory is named 'experience-bbcodes'                                                                             
Plugin name is 'discourse-badge-search', but plugin directory is named 'stemaway-badge-search'                                                                               
Plugin name is 'points-plugin', but plugin directory is named 'tacks-plugin'                                                                                                 
Plugin name is 'discourse-group-assign-by-custom-field', but plugin directory is named 'ucf-group-assignment'                                                                
rake aborted!                                                                                                                                                                
ActiveRecord::NoDatabaseError: We could not find your database: discourse. Which can be found in the database configuration file located at config/database.yml. (ActiveRecor
d::NoDatabaseError)                                                                                                                                                          
                           

```

and then later stuff like this:

```plaintext
Caused by:                                                                                                                                                                   
PG::ConnectionBad: connection to server at "172.31.x.y", port 5432 failed: could not open certificate file "/root/.postgresql/postgresql.crt": Permission denied (PG::Connec
tionBad)                                                                                                                                                                     
connection to server at "172.31.x.y", port 5432 failed: FATAL: no pg_hba.conf entry for host "172.31.x.y", user "postgres", database "discourse", no encryption   
...
Pups::ExecError: cd /var/www/discourse && sudo -E -u discourse bundle exec rake s3:upload_assets failed with return #<Process::Status: pid 7133 exit 1>                      

```

It doesn’t make sense (to me) that it can migrate andprecompile but not upload assets.  
If I get into the container as it’s building, I can connect to postgres using the credentials in the ENV.

I’ll work on getting the full log out of `tmux`. . .well, the buffer wasn’t very big and won’t fit here. I"ll try to make a bigger buffer, run another bootstrap, and stick the full log somewhere.

---

_[View the full topic](https://meta.discourse.org/t/trouble-bootstrapping-with-rds-could-not-open-certificate-file/289367)._