> In reality, you probably need a mechanism to enforce tag immutability: e.g., your own registry mirror. Ah, that sounds so trivial. And yet it is very much no

> In reality, you probably need a mechanism to enforce tag immutability: e.g., your own registry mirror. Ah, that sounds so trivial. And yet it is very much not. Aside from the hot mess that is the docker registry daemon, some tags are meant to be rolling. You absolutely do not want them cached.