> ## Documentation Index
> Fetch the complete documentation index at: https://docs.minimus.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Common Issues

> Troubleshoot general issues when working with Minimus

## Certificate errors (corporate proxy)

If you encounter an SSL/TLS error when trying to pull the image from docker, this may be caused by a corporate proxy on your local network. Popular corporate proxies include Zscaler Secure Internet Access (ZIA), FortiGate, Prisma Access and others.

Examples of common errors caused by a corporate proxy:

* `x509: certificate signed by unknown authority`
* `connection reset by peer`
* `TLS handshake timeout`

**To fix the problem**: Pull from a cloud VM that isn't impacted by firewall inspection to circumvent the issue. Updating the certificates on your local PC is generally harder because you would need to obtain the custom CA.

## Cached image is out of date

**To fix the problem**: Use the `--pull` flag with the `docker build` command or `--pull always` with `docker run` to force Docker to pull the latest image digest even if the version tag is the same.

To force Docker to pull the image even if an image with the same tag already exists locally:

<CodeGroup>
  ```example docker run theme={null}
  docker run --pull always {image}
  ```

  ```example docker build theme={null}
  docker build --pull -t {app_name}:{tag} .
  ```
</CodeGroup>

**Explanation**: Minimus images can potentially be rebuilt every day. As a result, the same image version tag may have numerous image digests. Many times, vulnerability fixes are delivered without the image version tag changing so it's particularly important to always pull the most recent digest. See for example the [Minimus digest-history for python version 3.13.5](https://images.minimus.io/images/python/lines/3.13/versions/3.13.5/digest-history)

## Error logs not returned by grep

**To fix the problem**: Add `2>&1` flag to `docker logs` command. For example:

```Example for 2>&1 flag theme={null}
docker logs {container_name_or_ID} 2>&1 | grep "{search_term}" 
```

**Explanation**: `2>&1` combines the standard error stream and output stream, so both are passed together to the pipe (|) and processed by `grep`.

## Package built by older compiler version

The issue may be a false-positive. If the latest package version was built with the most recent compiler version available at the time, the package is up to date. Compiler updates will only trigger a package rebuild if there is an impact to the security posture - that is, if new vulnerabilities are detected in the previous compiler version.

**Example**: The `mongo-tools` package is built with Go. If you run a version check it will look like this:

```bash theme={null}
/ $ mongodump --version
mongodump version: 100.13.0
git version: 23008ff975be028544710a5da6ae749dc7e90ab7
Go version: go1.25.1
   os: linux
   arch: amd64
   compiler: gc
```

The Go version may not be the latest anymore. At the time that the `mongo-tools` package `version 100.13.0` was built, Go version `go1.25.1` was the latest available. A package build using the latest Go will be manually triggered by the Minimus team when new vulnerability fixes are available for the Go compiler.

## Failed to resolve reference

If you try to pull an older image using the digest or timestamp tag and it fails, this may indicate that the image build is no longer within its retention window.

The error will read `Error response from daemon: failed to resolve reference... not found`.

**To fix the problem**: Pull the image version without pinning the digest or timestamp tag. For example, instead of pulling by digest using `reg.mini.dev/nginx-advanced@sha256:990126f8cc0...`, pull `reg.mini.dev/nginx-advanced:v1.28.0`.

Minimus retains redundant digests for production images for 180 days. For dev images, redundant digests are retained for 30 days. [Learn more](/introduction/versions#digest-retention-policy)


## Related topics

- [Known Issues](/troubleshooting/known-issues.md)
- [Hardening Compiler Flags for C/C++](/basics/compiler-options.md)
- [Managing Tokens](/manage/token.md)