Guard the pull

install.sh

@@ -119,6 +119,8 @@ IMAGE="${IMAGE_BASE}/${CUDA_VERSION}/tentacle:${IMAGE_TAG}"
 # -----------------------------
 # Registry login
 # -----------------------------
+docker logout "$REGISTRY" >/dev/null 2>&1 || true
+
 REG_USER="krkn-registry"
 
 read -rsp "Registry access token: " REG_PASS
@@ -147,7 +149,10 @@ WORKER_ID="${WORKER_ID:-$DEFAULT_WORKER_ID}"
 # Pull image
 # -----------------------------
 log "Pulling image: ${IMAGE}"
-docker pull "${IMAGE}"
+docker pull "${IMAGE}" || {
+  err "Failed to pull image. Check token permissions or image availability."
+  exit 1
+}
 
 # -----------------------------
 # Stop old container