Terra CellRanger | Docker access permission denied

24 views
Skip to first unread message

Julien Dilly

unread,
Aug 26, 2024, 3:11:17 PM8/26/24
to Cumulus Support

Dear Cumulus Team,

I am trying to run the Cellranger-arc-mfastq and Cellranger-arc-count workflow (github.com/lilab-bcb/cumulus/Cellranger:2.6.3) in Terra with default versions and docker options and it appears that I do not have access to the dockers, with the following error being outputted:

Task cellranger_arc_mkfastq.run_cellranger_arc_mkfastq:NA:1 failed. The job was stopped before the command finished. PAPI error code 7. Execution failed: generic::permission_denied: pulling image: docker pull: running ["docker" "pull" "gcr.io/broad-cumulus/cellranger-arc:2.0.2"]: exit status 1 (standard error: "Error response from daemon: pull access denied for gcr.io/broad-cumulus/cellranger-arc, repository does not exist or may require 'docker login': denied: Permission denied for "2.0.2" from request "/v2/broad-cumulus/cellranger-arc/manifests/2.0.2".\n")

Would you be able to indicate if there is a specific process to get access to it?

Thank you,
Julien

David Lieb

unread,
Aug 26, 2024, 8:04:36 PM8/26/24
to Julien Dilly, Cumulus Support
Hi Julien,

I got that exact error last year when running another Cumulus workflow and was able to resolve it by contacting Terra Support:

Hi David,
 
Thanks again for writing in! This docker image actually requires that your Terra account is part of the all_broad_users group in Terra which is probably why you're getting the permissions issue. I just added you (dl...@broadinstitute.org) to this group. Please let me know if you are still experiencing the error!
 
Kind regards,
Pamela

However, my account uses a Broad email address. So not sure if the same solution would work for you.

David

--
You received this message because you are subscribed to the Google Groups "Cumulus Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cumulus-suppo...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cumulus-support/8bd3d799-7c4a-4a86-a577-a30104a11bf8n%40googlegroups.com.

Julien Dilly

unread,
Aug 26, 2024, 8:04:40 PM8/26/24
to David Lieb, Cumulus Support
Thank you David!
I also thought that this issue was due to me not being added to the all_broad_users group but after being added I am still experiencing the same issue.

Julien

Alexis Caulier

unread,
Sep 9, 2024, 10:32:40 PM9/9/24
to Cumulus Support
Hello Julien,

I also get the same error: 
Task cellranger_arc_mkfastq.run_cellranger_arc_mkfastq:NA:1 failed. The job was stopped before the command finished. PAPI error code 9. Execution failed: generic::failed_precondition: pulling image: docker pull: running ["docker" "pull" "gcr.io/broad-cumulus/cellranger-arc:2.0.2.strato"]: exit status 1 (standard error: "Error response from daemon: manifest for gcr.io/broad-cumulus/cellranger-arc:2.0.2.strato not found: manifest unknown: Failed to fetch \"2.0.2.strato\" from request \"/v2/broad-cumulus/cellranger-arc/manifests/2.0.2.strato\".\n")
Were you able to troubleshoot it?

Thank you,

Alexis

Yiming Yang

unread,
Sep 10, 2024, 4:23:50 PM9/10/24
to Alexis Caulier, julien....@gmail.com, dsri...@broadinstitute.org, Cumulus Support
Just include Deeptha from Broad into this email thread.

Hi Deeptha,

As you can read from the quoted email content below, there are still Broad users using Cumulus Cellranger workflow for running the mkfastq step. Since our team has lost the access to modify/update docker images in gcr.io/broad-cumulus repo, I just wonder how to handle such a kind of user support cases in the future. 

I have 2 options in mind:
  1. I update the docker images, and then ask you to update accordingly by pulling them into gcr.io/broad-cumulus registry.
  2. I direct users to you, and you will guide them to use your bcl-converter workflow to cover the mkfastq step. After that, users can come back to use Cumulus Cellranger workflow with the generated FASTQ files as input, and set "run_mkfastq" to false when running the count step.
What do you think?


Sincerely,
Yiming



--
γνθι σεαυτόν.
Reply all
Reply to author
Forward
0 new messages