Gemini CLI error
Gemini CLI: Sandbox image '<image>' is missing or could not be pulled
Sandbox image '<image>' is missing or could not be pulled. Please check the image name, your network connection, or notify gemini-cli-dev@google.com if the issue persists.Status: By designLast verified 3 documented fixes3 sources
What it means
Sandboxing is enabled (Docker or Podman) but the sandbox container image is not present locally and could not be pulled. The CLI exits with code 44 (FatalSandboxError).
Causes
- The configured sandbox image name is wrong, or the image could not be pulled (for example, no network access to the registry).
How to fix it
- Fix 1.
Check the image name and your network connection, as the error message says. Contact gemini-cli-dev@google.com if it persists.
- Fix 2.
For the local development image, the message instead says: "Try running
npm run build:allornpm run build:sandboxunder the gemini-cli repo to build it locally, or check the image name and your network connection."Terminalnpm run build:sandbox - Fix 3.
For sandbox-restricted operations ("Operation not permitted", "Permission denied"), see the Sandboxing configuration docs.
More Gemini CLI errors
All 19 Gemini CLI errorsYou must be a named user on your organization's Gemini Code Assist Standard edition subscription to use this service. Please contact your administrator to request an entitlement to Gemini Code Assist Standard edition.Status: WorkaroundFailed to sign in. Message: Your current account is not eligible... because it is not currently available in your location.Status: By designFailed to sign in. Message: Request contains an invalid argumentStatus: WorkaroundUNABLE_TO_GET_ISSUER_CERT_LOCALLY or unable to get local issuer certificateStatus: WorkaroundThis account requires setting the GOOGLE_CLOUD_PROJECT or GOOGLE_CLOUD_PROJECT_ID env var. See https://geminicli.com/docs/get-started/authentication/#set-gcpStatus: By designInvalid Google Cloud Project ID: "<projectId>". The GOOGLE_CLOUD_PROJECT (or GOOGLE_CLOUD_PROJECT_ID) environment variable must be set to your string-based Project ID (e.g., "my-project-123"), not your numeric Project Number. Please update your environment variables.Status: By designFailed to login. Message: Precondition check failed.Status: Fixed in releaseYou are currently configured to use a Google Cloud Project but lack a Gemini Code Assist license. Please contact your administrator to request a license.Status: Workaround
Related reading
- Do Your Agent Hooks Fail Open? Claude Code vs Codex vs Cursor vs Gemini CLIA guard hook that crashes, times out or points at a missing script lets the tool call through by default in Claude Code. v2.1.295 adds onFailure: block. Here is what each coding agent does when your policy hook breaks, with real test runs.
- How to Keep API Keys Away From Your AI Coding Agent: Claude Code vs Codex vs Cursor vs Gemini CLIA deny rule on .env stops cat but not a Python one-liner. Here are the three layers that actually keep secrets out of a coding agent's context - file rules, environment scrubbing and credential masking - and what Claude Code, Codex, Cursor and Gemini CLI give you for each, with real test runs.
- Headless AI Coding Agents in CI: Claude Code, Codex CLI, Gemini CLI, and opencode ComparedHeadless AI coding agents in CI compared: Claude Code, Codex CLI, Gemini CLI, and opencode on invocation flags, sandboxing, auth, and output formats.
- Gemini CLI to Antigravity CLI Migration Guide: The June 18 DeadlineGemini CLI to Antigravity CLI migration guide: install, migrate config, update scripts and CI, and avoid the silent MCP failure that breaks tool calls.
- Gemini CLI Guide: 1M Token Context and Who Can Still Use ItGemini CLI puts a 1 million token context in your terminal but now only serves paid Gemini API, Vertex AI and Code Assist users. Setup and TypeScript workflow.
FAQ
What does "Sandbox image '<image>' is missing or could not be pulled" mean in Gemini CLI?
Sandboxing is enabled (Docker or Podman) but the sandbox container image is not present locally and could not be pulled. The CLI exits with code 44 (FatalSandboxError).
How do I fix "Sandbox image '<image>' is missing or could not be pulled"?
There are 3 documented fixes. Start with the first: Check the image name and your network connection, as the error message says. Contact gemini-cli-dev@google.com if it persists.
Is this Gemini CLI error fixed?
Status: By design. Expected behavior, not a bug. The documented fixes change the setup that triggers it.
Sources
Last verified against 3 sources: official docs, maintainer replies and release notes.
Newsletter
Fixes for the tools you use, weekly
One email per week. New coding agent releases, what broke, and how developers are working around it.