# Pull access denied

**URL:** https://meta.discourse.org/t/pull-access-denied/298653
**Category:** Self-hosting
**Created:** [March 9, 2024, 1:08am UTC](https://meta.discourse.org/t/pull-access-denied/298653 "2024-03-09T01:08:08Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 9, 2024, 1:08am UTC](https://meta.discourse.org/t/pull-access-denied/298653/1 "2024-03-09T01:08:08Z")

</div>

Hi, have this:

> Unable to find image ‘local\_discourse/app:latest’ locally  
> docker: Error response from daemon: pull access denied for local\_discourse/app, repository does not exist or may require ‘docker login’: denied: requested access to the resource is denied.  
> See ‘docker run --help’.

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 9, 2024, 1:17am UTC](https://meta.discourse.org/t/pull-access-denied/298653/2 "2024-03-09T01:17:27Z")

</div>

I had a look at the code! Seems like the launcher uses local\_discourse/app (wich not exists) as image if the variable $run\_image is empty! This has the following code:

```plaintext
cat $config_file | $docker_path run $user_args --rm -i -a stdin -a stdout $image ruby -e \
    "require 'yaml'; puts YAML.load(STDIN.readlines.join)['run_image']"

```

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 11, 2024, 6:22pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/3 "2024-03-11T18:22:15Z")

</div>

@pfaffman

Do you have a idea?

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 11, 2024, 9:33pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/4 "2024-03-11T21:33:09Z")

</div>

Are you behind some kind of firewall?

Does

```plaintext
docker run hello-world

```

work?

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 11, 2024, 10:56pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/5 "2024-03-11T22:56:00Z")

</div>

> Hello from Docker!  
> This message shows that your installation appears to be working correctly.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 12, 2024, 12:04am UTC](https://meta.discourse.org/t/pull-access-denied/298653/6 "2024-03-12T00:04:39Z")

</div>

Did you run discourse-setup?

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 12, 2024, 9:41am UTC](https://meta.discourse.org/t/pull-access-denied/298653/7 "2024-03-12T09:41:10Z")

</div>

Yes, i did

---

<div class="post-metadata">

### Author: ![cbc404](https://avatars.discourse-cdn.com/v4/letter/c/e47c2d/32.png) [@cbc404](https://meta.discourse.org/u/cbc404)
#### Post date: [March 17, 2024, 12:48pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/8 "2024-03-17T12:48:30Z")

</div>

I have the same exact problem, and have gone through the suggested steps. Debian 12 bookworm, docker installed from apt, 20.10.24+dfsg1, Bump.

iptables -S  
-P INPUT ACCEPT  
-P FORWARD DROP  
-P OUTPUT ACCEPT  
-N DOCKER  
-N DOCKER-ISOLATION-STAGE-1  
-N DOCKER-ISOLATION-STAGE-2  
-N DOCKER-USER  
-A FORWARD -j DOCKER-USER  
-A FORWARD -j DOCKER-ISOLATION-STAGE-1  
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT  
-A FORWARD -o docker0 -j DOCKER  
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT  
-A FORWARD -i docker0 -o docker0 -j ACCEPT  
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2  
-A DOCKER-ISOLATION-STAGE-1 -j RETURN  
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP  
-A DOCKER-ISOLATION-STAGE-2 -j RETURN  
-A DOCKER-USER -j RETURN

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 17, 2024, 4:03pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/9 "2024-03-17T16:03:22Z")

</div>

So, this solved the problem?

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 17, 2024, 4:04pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/10 "2024-03-17T16:04:12Z")

</div>

The image also not exists?

---

<div class="post-metadata">

### Author: ![cbc404](https://avatars.discourse-cdn.com/v4/letter/c/e47c2d/32.png) [@cbc404](https://meta.discourse.org/u/cbc404)
#### Post date: [March 17, 2024, 4:18pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/11 "2024-03-17T16:18:17Z")

</div>

Nah, that’s just my firewall’s configuration in case it’s relevant, I’m as clueless still as to what is causing this.. as my Debian is freshly installed.

---

<div class="post-metadata">

### Author: ![Justman10000](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justman10000/32/252913_2.png) [@Justman10000](https://meta.discourse.org/u/Justman10000)
#### Post date: [March 17, 2024, 5:51pm UTC](https://meta.discourse.org/t/pull-access-denied/298653/12 "2024-03-17T17:51:43Z")

</div>

Well, as I said, it tries to pull the image `local_discourse/app:lates` if the variable `$run_image` is empty!
