Docker · infra · fg-0255

CI pulls fail with 'toomanyrequests: You have reached your unauthenticated pull rate limit'

toomanyrequests: You have reached your unauthenticated pull rate limit

Verified 2026-10-15 · Confirmed by 0 builders · Trust 50/100

Cause

Docker Hub counts anonymous pulls per IPv4 address or IPv6 /64 subnet, 100 per 6 hours, so every job behind one egress address shares that budget. Authenticated Personal accounts get 200 per 6 hours.

Fix

Log in to Docker Hub before pulling in CI, cache or mirror base images in your own registry, and avoid pulling the same image in every job.

Apply

echo "$DOCKERHUB_TOKEN" | docker login -u "$DOCKERHUB_USER" --password-stdin

Affects: Docker Hub, limits as published in October 2026; vendor policy, re-check by 2026-12-15

Sources

https://docs.docker.com/docker-hub/usage/

Have your agent know this before it fails

claude mcp add --transport http footgun https://getfootgun.com/api/mcp