Gemma4 DFlash Docker image on GHCR returns unauthorized

[paolo-losi]

Problem

The Gemma4 DFlash Docker image referenced in the README appears to be inaccessible from a normal authenticated/unauthenticated Docker client.

README reference:

• ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130

I tried to launch the Gemma4 DFlash container on an Ubuntu host and Docker failed while pulling the image:

Unable to find image 'ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130' locally
docker: Error response from daemon: error from registry: unauthorized
unauthorized

Reproduction

docker pull ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130

Environment

• Host: Ubuntu
• Docker daemon on a remote GPU server
• Date: 2026-05-07

Request

Could you confirm whether:

• this GHCR package is intended to be public,
• additional registry auth is required,
• or the README should point to a different image / registry?

I checked the README and the image path appears to match what is documented, so this looks like either a package visibility problem or missing access instructions.

[SpeakerRecognizer]

I have a similar problem

docker pull ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130
Error response from daemon: unknown: failed to resolve reference "ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130": unexpected status from HEAD request to https://ghcr.io/v2/z-lab/vllm-openai/manifests/gemma4-dflash-cu130: 403 Forbidden

[SpeakerRecognizer]

Among the pkgs, I see only paroquant.

https://github.com/orgs/z-lab/packages

@paolo-losi Your problem should be solved +- like this:

Step 1: Generate a GitHub Personal Access Token (PAT)
Go to GitHub Settings → Developer settings → Personal access tokens → Tokens (classic)
- Click Generate new token (classic)
- Add a descriptive name (e.g., "GHCR Docker pull")
- Select the following scopes:
- - read:packages (minimum required)
- - write:packages (if you need to push)
- - repo (if the package is tied to a private repository)
- Click Generate token and copy it immediately

Step 2: Login to GHCR and Pull

echo "YOUR_PAT_TOKEN" | docker login ghcr.io -u YOUR_GITHUB_USERNAME --password-stdin

docker pull ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130

But after that, you'll run into the same problem I did.

[ChrisDrit]

I'm seeing the same issue:

docker pull ghcr.io/z-lab/vllm-openai:gemma4-dflash-cu130
Error response from daemon: Head "https://ghcr.io/v2/z-lab/vllm-openai/manifests/gemma4-dflash-cu130": unauthorized

[fritol]

same

[devferrazZz]

same