Currently containers are pulled directly from dockerhub and quay.io every time a compute node is started.
Container pulls can be redirected internally to a local pull through proxy registry, reducing the load on the third party registries and insulating against outages.
https://github.com/distribution/distribution
https://docs.docker.com/registry/configuration/#proxy