Minikube fails to pull kicbase image due to permission denied error on docker.sock

[radon-at-beeper]

What Happened?

On my system (Arch Linux) my user is intentionally not in a group that allows direct communication with the Docker daemon, as that would be equivalent to granting every process root privileges on the host. So, all Docker commands need to be run via sudo. To make this easier I have a docker wrapper script on my $PATH that will detect if Docker is being run by a non-root user, and delegate to sudo for authorization.

Something appears to be going wrong with how minikube interacts with sudo and docker. Some operations work, but others do not. When I run minikube start, it invokes docker which successfully escalates privileges via sudo. But then later in the same command, it repeatedly fails to preload images because it is trying to communicate to the Docker socket directly without doing any privilege escalation. The error looks like this:

🚜  Pulling base image v0.0.50 ...
❗  minikube cannot pull kicbase image from any docker registry, and is trying to download kicbase tarball from github release page via HTTP.
❗  It's very likely that you have an internet issue. Please ensure that you can access the internet at least via HTTP, directly or with proxy. Currently your proxy configuration is:

    > kicbase-v0.0.50-amd64.tar:  1.28 GiB / 1.28 GiB  100.00% 41.96 MiB p/s 32
E0324 11:09:22.419032 3048007 cache.go:239] Error downloading kic artifacts:  failed to load kic base image into docker: error loading image: permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post "http://%2Fvar%2Frun%2Fdocker.sock/v1.51/images/load?quiet=0": dial unix /var/run/docker.sock: connect: permission denied

Note that the message saying It's very likely that you have an internet issue is a red herring, and should probably be updated to not fire if the error occurs after successful download of the preloads is already finished, because the operation that fails here is the part that takes place offline.

I'm unsure what the intended usage of minikube on a system without direct Docker socket access is. It seems like it is trying to use sudo, but that is not working as intended. Is this a bug, or am I supposed to always run minikube with sudo myself?

Relevant log output

% minikube start --profile=test --driver=docker --alsologtostderr
I0324 11:01:03.575457 3027200 out.go:360] Setting OutFile to fd 1 ...
I0324 11:01:03.575535 3027200 out.go:413] isatty.IsTerminal(1) = true
I0324 11:01:03.575538 3027200 out.go:374] Setting ErrFile to fd 2...
I0324 11:01:03.575541 3027200 out.go:413] isatty.IsTerminal(2) = true
I0324 11:01:03.575628 3027200 root.go:338] Updating PATH: /home/radon/.minikube/bin
I0324 11:01:03.575852 3027200 out.go:368] Setting JSON to false
I0324 11:01:03.577296 3027200 start.go:134] hostinfo: {"hostname":"sarene","uptime":1129652,"bootTime":1773245611,"procs":642,"os":"linux","platform":"arch","platformFamily":"arch","platformVersion":"","kernelVersion":"6.19.6-arch1-1","kernelArch":"x86_64","virtualizationSystem":"kvm","virtualizationRole":"host","hostId":"b0d9d32d-761c-40bd-b3ab-154ab0bc09b8"}
I0324 11:01:03.577383 3027200 start.go:144] virtualization: kvm host
I0324 11:01:03.586021 3027200 out.go:179] 😄  [test] minikube v1.38.1 on Arch 
😄  [test] minikube v1.38.1 on Arch 
I0324 11:01:03.587055 3027200 notify.go:220] Checking for updates...
I0324 11:01:03.587388 3027200 config.go:183] Loaded profile config "beeper": Driver=docker, ContainerRuntime=docker, KubernetesVersion=v1.34.0
I0324 11:01:03.587465 3027200 driver.go:422] Setting default libvirt URI to qemu:///system
Place your finger on the fingerprint reader
I0324 11:01:06.560350 3027200 docker.go:125] docker version: linux-29.3.0:
I0324 11:01:06.560481 3027200 cli_runner.go:164] Run: docker system info --format "{{json .}}"
I0324 11:01:06.610807 3027200 info.go:266] docker info: {ID:fc5bb6d7-d569-4754-8be0-ec49cbfd13b1 Containers:3 ContainersRunning:2 ContainersPaused:0 ContainersStopped:1 Images:3 Driver:overlayfs DriverStatus:[[driver-type io.containerd.snapshotter.v1]] SystemStatus:<nil> Plugins:{Volume:[local] Network:[bridge host ipvlan macvlan null overlay] Authorization:<nil> Log:[awslogs fluentd gcplogs gelf journald json-file local splunk syslog]} MemoryLimit:true SwapLimit:true KernelMemory:false KernelMemoryTCP:false CPUCfsPeriod:true CPUCfsQuota:true CPUShares:true CPUSet:true PidsLimit:true IPv4Forwarding:true BridgeNfIptables:false BridgeNfIP6Tables:false Debug:false NFd:41 OomKillDisable:false NGoroutines:70 SystemTime:2026-03-24 11:01:06.605242734 -0700 PDT LoggingDriver:json-file CgroupDriver:systemd NEventsListener:0 KernelVersion:6.19.6-arch1-1 OperatingSystem:Arch Linux OSType:linux Architecture:x86_64 IndexServerAddress:https://index.docker.io/v1/ RegistryConfig:{AllowNondistributableArtifactsCIDRs:[] AllowNondistributableArtifactsHostnames:[] InsecureRegistryCIDRs:[::1/128 127.0.0.0/8] IndexConfigs:{DockerIo:{Name:docker.io Mirrors:[] Secure:true Official:true}} Mirrors:[]} NCPU:24 MemTotal:49750614016 GenericResources:<nil> DockerRootDir:/var/lib/docker HTTPProxy: HTTPSProxy: NoProxy: Name:sarene Labels:[] ExperimentalBuild:false ServerVersion:29.3.0 ClusterStore: ClusterAdvertise: Runtimes:{Runc:{Path:runc}} DefaultRuntime:runc Swarm:{NodeID: NodeAddr: LocalNodeState:inactive ControlAvailable:false Error: RemoteManagers:<nil>} LiveRestoreEnabled:false Isolation: InitBinary:docker-init ContainerdCommit:{ID:301b2dac98f15c27117da5c8af12118a041a31d9.m Expected:} RuncCommit:{ID: Expected:} InitCommit:{ID:de40ad0 Expected:} SecurityOptions:[name=seccomp,profile=builtin name=cgroupns] ProductLicense: Warnings:<nil> ServerErrors:[] ClientInfo:{Debug:false Plugins:[map[Name:buildx Path:/usr/lib/docker/cli-plugins/docker-buildx SchemaVersion:0.1.0 ShortDescription:Docker Buildx Vendor:Docker Inc. Version:0.32.1]] Warnings:<nil>}}
I0324 11:01:06.610873 3027200 docker.go:320] overlay module found
I0324 11:01:06.612055 3027200 out.go:179] ✨  Using the docker driver based on user configuration
✨  Using the docker driver based on user configuration
I0324 11:01:06.612706 3027200 start.go:310] selected driver: docker
I0324 11:01:06.612719 3027200 start.go:935] validating driver "docker" against <nil>
I0324 11:01:06.612733 3027200 start.go:946] status for docker: {Installed:true Healthy:true Running:false NeedsImprovement:false Error:<nil> Reason: Fix: Doc: Version:}
I0324 11:01:06.612843 3027200 cli_runner.go:164] Run: docker system info --format "{{json .}}"
I0324 11:01:06.662832 3027200 info.go:266] docker info: {ID:fc5bb6d7-d569-4754-8be0-ec49cbfd13b1 Containers:3 ContainersRunning:2 ContainersPaused:0 ContainersStopped:1 Images:3 Driver:overlayfs DriverStatus:[[driver-type io.containerd.snapshotter.v1]] SystemStatus:<nil> Plugins:{Volume:[local] Network:[bridge host ipvlan macvlan null overlay] Authorization:<nil> Log:[awslogs fluentd gcplogs gelf journald json-file local splunk syslog]} MemoryLimit:true SwapLimit:true KernelMemory:false KernelMemoryTCP:false CPUCfsPeriod:true CPUCfsQuota:true CPUShares:true CPUSet:true PidsLimit:true IPv4Forwarding:true BridgeNfIptables:false BridgeNfIP6Tables:false Debug:false NFd:41 OomKillDisable:false NGoroutines:70 SystemTime:2026-03-24 11:01:06.657253654 -0700 PDT LoggingDriver:json-file CgroupDriver:systemd NEventsListener:0 KernelVersion:6.19.6-arch1-1 OperatingSystem:Arch Linux OSType:linux Architecture:x86_64 IndexServerAddress:https://index.docker.io/v1/ RegistryConfig:{AllowNondistributableArtifactsCIDRs:[] AllowNondistributableArtifactsHostnames:[] InsecureRegistryCIDRs:[::1/128 127.0.0.0/8] IndexConfigs:{DockerIo:{Name:docker.io Mirrors:[] Secure:true Official:true}} Mirrors:[]} NCPU:24 MemTotal:49750614016 GenericResources:<nil> DockerRootDir:/var/lib/docker HTTPProxy: HTTPSProxy: NoProxy: Name:sarene Labels:[] ExperimentalBuild:false ServerVersion:29.3.0 ClusterStore: ClusterAdvertise: Runtimes:{Runc:{Path:runc}} DefaultRuntime:runc Swarm:{NodeID: NodeAddr: LocalNodeState:inactive ControlAvailable:false Error: RemoteManagers:<nil>} LiveRestoreEnabled:false Isolation: InitBinary:docker-init ContainerdCommit:{ID:301b2dac98f15c27117da5c8af12118a041a31d9.m Expected:} RuncCommit:{ID: Expected:} InitCommit:{ID:de40ad0 Expected:} SecurityOptions:[name=seccomp,profile=builtin name=cgroupns] ProductLicense: Warnings:<nil> ServerErrors:[] ClientInfo:{Debug:false Plugins:[map[Name:buildx Path:/usr/lib/docker/cli-plugins/docker-buildx SchemaVersion:0.1.0 ShortDescription:Docker Buildx Vendor:Docker Inc. Version:0.32.1]] Warnings:<nil>}}
W0324 11:01:06.662955 3027200 out.go:285] ❗  Starting v1.39.0, minikube will default to "containerd" container runtime. See #21973 for more info.
❗  Starting v1.39.0, minikube will default to "containerd" container runtime. See #21973 for more info.
I0324 11:01:06.662967 3027200 start_flags.go:332] no existing cluster config was found, will generate one from the flags 
I0324 11:01:06.663749 3027200 start_flags.go:416] Using suggested 11800MB memory alloc based on sys=47445MB, container=47445MB
I0324 11:01:06.663835 3027200 start_flags.go:1000] Wait components to verify : map[apiserver:true system_pods:true]
I0324 11:01:06.664443 3027200 out.go:179] 📌  Using Docker driver with root privileges
📌  Using Docker driver with root privileges
I0324 11:01:06.664957 3027200 cni.go:83] Creating CNI manager for ""
I0324 11:01:06.664997 3027200 cni.go:157] "docker" driver + "docker" container runtime found on kubernetes v1.24+, recommending bridge
I0324 11:01:06.665007 3027200 start_flags.go:341] Found "bridge CNI" CNI - setting NetworkPlugin=cni
I0324 11:01:06.665057 3027200 start.go:358] cluster config:
{Name:test KeepContext:false EmbedCerts:false MinikubeISO: KicBaseImage:gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 Memory:11800 CPUs:2 DiskSize:20000 Driver:docker HyperkitVpnKitSock: HyperkitVSockPorts:[] DockerEnv:[] ContainerVolumeMounts:[] InsecureRegistry:[] RegistryMirror:[] HostOnlyCIDR:192.168.59.1/24 HypervVirtualSwitch: HypervUseExternalSwitch:false HypervExternalAdapter: KVMNetwork:default KVMQemuURI:qemu:///system KVMGPU:false KVMHidden:false KVMNUMACount:1 APIServerPort:8443 DockerOpt:[] DisableDriverMounts:false NFSShare:[] NFSSharesRoot:/nfsshares UUID: NoVTXCheck:false DNSProxy:false HostDNSResolver:true HostOnlyNicType:virtio NatNicType:virtio SSHIPAddress: SSHUser:root SSHKey: SSHPort:22 KubernetesConfig:{KubernetesVersion:v1.35.1 ClusterName:test Namespace:default APIServerHAVIP: APIServerName:minikubeCA APIServerNames:[] APIServerIPs:[] DNSDomain:cluster.local ContainerRuntime:docker CRISocket: NetworkPlugin:cni FeatureGates: ServiceCIDR:10.96.0.0/12 ImageRepository: LoadBalancerStartIP: LoadBalancerEndIP: CustomIngressCert: RegistryAliases: ExtraOptions:[] ShouldLoadCachedImages:true EnableDefaultCNI:false CNI:} Nodes:[{Name: IP: Port:8443 KubernetesVersion:v1.35.1 ContainerRuntime:docker ControlPlane:true Worker:true}] Addons:map[] CustomAddonImages:map[] CustomAddonRegistries:map[] VerifyComponents:map[apiserver:true system_pods:true] StartHostTimeout:6m0s ScheduledStop:<nil> ExposedPorts:[] ListenAddress: Network: Subnet: MultiNodeRequested:false ExtraDisks:0 CertExpiration:26280h0m0s MountString: Mount9PVersion:9p2000.L MountGID:docker MountIP: MountMSize:262144 MountOptions:[] MountPort:0 MountType:9p MountUID:docker BinaryMirror: DisableOptimizations:false DisableMetrics:false DisableCoreDNSLog:false CustomQemuFirmwarePath: SocketVMnetClientPath: SocketVMnetPath: StaticIP: SSHAuthSock: SSHAgentPID:0 GPUs: AutoPauseInterval:1m0s Rosetta:false}
I0324 11:01:06.665773 3027200 out.go:179] 👍  Starting "test" primary control-plane node in "test" cluster
👍  Starting "test" primary control-plane node in "test" cluster
I0324 11:01:06.666581 3027200 cache.go:135] Beginning downloading kic base image for docker with docker
I0324 11:01:06.667069 3027200 out.go:179] 🚜  Pulling base image v0.0.50 ...
🚜  Pulling base image v0.0.50 ...
I0324 11:01:06.667568 3027200 preload.go:187] Checking if preload exists for k8s version v1.35.1 and runtime docker
I0324 11:01:06.667652 3027200 image.go:82] Checking for gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 in local docker daemon
I0324 11:01:06.711411 3027200 cache.go:164] Downloading gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 to local cache
I0324 11:01:06.711520 3027200 image.go:66] Checking for gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 in local cache directory
I0324 11:01:06.711544 3027200 image.go:151] Writing gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 to local cache
I0324 11:01:06.774131 3027200 preload.go:147] Found remote preload: https://storage.googleapis.com/minikube-preloaded-volume-tarballs/v18/v1.35.1/preloaded-images-k8s-v18-v1.35.1-docker-overlay2-amd64.tar.lz4
I0324 11:01:06.774175 3027200 cache.go:66] Caching tarball of preloaded images
I0324 11:01:06.774425 3027200 preload.go:187] Checking if preload exists for k8s version v1.35.1 and runtime docker
I0324 11:01:06.783300 3027200 out.go:179] 💾  Downloading Kubernetes v1.35.1 preload ...
💾  Downloading Kubernetes v1.35.1 preload ...
I0324 11:01:06.783857 3027200 preload.go:268] Downloading preload from https://storage.googleapis.com/minikube-preloaded-volume-tarballs/v18/v1.35.1/preloaded-images-k8s-v18-v1.35.1-docker-overlay2-amd64.tar.lz4
I0324 11:01:06.783867 3027200 preload.go:335] getting checksum for preloaded-images-k8s-v18-v1.35.1-docker-overlay2-amd64.tar.lz4 from gcs api...
I0324 11:01:06.951591 3027200 preload.go:312] Got checksum from GCS API "0196e6e2824ad229ae3d9d11863129d8"
I0324 11:01:06.951691 3027200 download.go:113] Downloading: https://storage.googleapis.com/minikube-preloaded-volume-tarballs/v18/v1.35.1/preloaded-images-k8s-v18-v1.35.1-docker-overlay2-amd64.tar.lz4?checksum=md5:0196e6e2824ad229ae3d9d11863129d8 -> /home/radon/.minikube/cache/preloaded-tarball/preloaded-images-k8s-v18-v1.35.1-docker-overlay2-amd64.tar.lz4
    > preloaded-images-k8s-v18-v1...:  272.45 MiB / 272.45 MiB  100.00% 14.53 M
    > gcr.io/k8s-minikube/kicbase...:  473.67 MiB / 519.58 MiB  91.16% 24.01 MiI0324 11:01:26.545530 3027200 cache.go:69] Finished verifying existence of preloaded tar for v1.35.1 on docker
I0324 11:01:26.545613 3027200 profile.go:143] Saving config to /home/radon/.minikube/profiles/test/config.json ...
I0324 11:01:26.545639 3027200 lock.go:61] WriteFile acquiring /home/radon/.minikube/profiles/test/config.json: {Name:mk299497b94700efcc216944913d25f08e528f08 Timeout:1m0s Delay:500ms}
    > gcr.io/k8s-minikube/kicbase...:  519.58 MiB / 519.58 MiB  100.00% 25.48 M
I0324 11:01:27.968945 3027200 cache.go:167] successfully saved gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 as a tarball
I0324 11:01:27.968960 3027200 cache.go:177] Loading gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 from local cache
I0324 11:01:27.969545 3027200 cache.go:183] failed to download gcr.io/k8s-minikube/kicbase:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93, will try fallback image if available: error loading image: permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post "http://%2Fvar%2Frun%2Fdocker.sock/v1.51/images/load?quiet=0": dial unix /var/run/docker.sock: connect: permission denied
I0324 11:01:27.969561 3027200 image.go:82] Checking for docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 in local docker daemon
I0324 11:01:28.016178 3027200 cache.go:164] Downloading docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 to local cache
I0324 11:01:28.016288 3027200 image.go:66] Checking for docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 in local cache directory
I0324 11:01:28.016299 3027200 image.go:69] Found docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 in local cache directory, skipping pull
I0324 11:01:28.016307 3027200 image.go:138] docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 exists in cache, skipping pull
I0324 11:01:28.016314 3027200 cache.go:167] successfully saved docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 as a tarball
I0324 11:01:28.016319 3027200 cache.go:177] Loading docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93 from local cache
I0324 11:01:28.016642 3027200 cache.go:183] failed to download docker.io/kicbase/stable:v0.0.50@sha256:eb4fec00e8ad70adf8e6436f195cc429825ffb85f95afcdb5d8d9deb576f3e93, will try fallback image if available: error loading image: permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post "http://%2Fvar%2Frun%2Fdocker.sock/v1.51/images/load?quiet=0": dial unix /var/run/docker.sock: connect: permission denied
I0324 11:01:28.016651 3027200 image.go:82] Checking for gcr.io/k8s-minikube/kicbase:v0.0.50 in local docker daemon
I0324 11:01:28.060477 3027200 cache.go:164] Downloading gcr.io/k8s-minikube/kicbase:v0.0.50 to local cache
I0324 11:01:28.060583 3027200 image.go:66] Checking for gcr.io/k8s-minikube/kicbase:v0.0.50 in local cache directory
I0324 11:01:28.060594 3027200 image.go:69] Found gcr.io/k8s-minikube/kicbase:v0.0.50 in local cache directory, skipping pull
I0324 11:01:28.060599 3027200 image.go:138] gcr.io/k8s-minikube/kicbase:v0.0.50 exists in cache, skipping pull
I0324 11:01:28.060605 3027200 cache.go:167] successfully saved gcr.io/k8s-minikube/kicbase:v0.0.50 as a tarball
I0324 11:01:28.060610 3027200 cache.go:177] Loading gcr.io/k8s-minikube/kicbase:v0.0.50 from local cache
I0324 11:01:28.060669 3027200 cache.go:183] failed to download gcr.io/k8s-minikube/kicbase:v0.0.50, will try fallback image if available: tarball: unexpected EOF
I0324 11:01:28.060675 3027200 image.go:82] Checking for docker.io/kicbase/stable:v0.0.50 in local docker daemon
I0324 11:01:28.106535 3027200 cache.go:164] Downloading docker.io/kicbase/stable:v0.0.50 to local cache
I0324 11:01:28.106638 3027200 image.go:66] Checking for docker.io/kicbase/stable:v0.0.50 in local cache directory
I0324 11:01:28.106648 3027200 image.go:69] Found docker.io/kicbase/stable:v0.0.50 in local cache directory, skipping pull
I0324 11:01:28.106664 3027200 image.go:138] docker.io/kicbase/stable:v0.0.50 exists in cache, skipping pull
I0324 11:01:28.106696 3027200 cache.go:167] successfully saved docker.io/kicbase/stable:v0.0.50 as a tarball
I0324 11:01:28.106701 3027200 cache.go:177] Loading docker.io/kicbase/stable:v0.0.50 from local cache
I0324 11:01:28.106751 3027200 cache.go:183] failed to download docker.io/kicbase/stable:v0.0.50, will try fallback image if available: tarball: unexpected EOF
W0324 11:01:28.106767 3027200 out.go:285] ❗  minikube cannot pull kicbase image from any docker registry, and is trying to download kicbase tarball from github release page via HTTP.
❗  minikube cannot pull kicbase image from any docker registry, and is trying to download kicbase tarball from github release page via HTTP.
W0324 11:01:28.106775 3027200 out.go:285] ❗  It's very likely that you have an internet issue. Please ensure that you can access the internet at least via HTTP, directly or with proxy. Currently your proxy configuration is:
❗  It's very likely that you have an internet issue. Please ensure that you can access the internet at least via HTTP, directly or with proxy. Currently your proxy configuration is:
I0324 11:01:28.114991 3027200 out.go:203] 

I0324 11:01:28.115877 3027200 download.go:113] Downloading: https://github.com/kubernetes/minikube/releases/download/v1.38.1/kicbase-v0.0.50-amd64.tar -> /home/radon/.minikube/cache/kic/amd64/stable_v0.0.50.tar
    > kicbase-v0.0.50-amd64.tar:  1.28 GiB / 1.28 GiB  100.00% 35.27 MiB p/s 37
I0324 11:02:06.230879 3027200 cache.go:211] successfully downloaded kicbase as fall back image from github
E0324 11:02:06.231314 3027200 cache.go:239] Error downloading kic artifacts:  failed to load kic base image into docker: error loading image: permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post "http://%2Fvar%2Frun%2Fdocker.sock/v1.51/images/load?quiet=0": dial unix /var/run/docker.sock: connect: permission denied
I0324 11:02:06.231321 3027200 cache.go:244] Successfully downloaded all kic artifacts

Attach the log file

log.txt

Operating System

Other

Driver

Docker

[princebirring]

I'd like to work on this issue. I'll submit a PR soon.