Create microsoft registry and stop using foreign layers
Currently the microsoft images for dotnet, server-core etc.use foreign layers to point to the base layers so they are pulled directly from microsoft, i believe this was done for licensing reasons.
This causes issues running in most 'enterprise' networks where direct internet access is not allowed, the normal solution is something like nexus to proxy remote registries. Foreign layers bypasses this and workarounds like '--allow-nondistributable-artifacts' are cumbersome.
Other companies like Oracle have created there own repos where they can host there own licensed images which is a far simpler solution (https://blogs.oracle.com/weblogicserver/the-oracle-container-registry-has-gone-live).
Is it possible for microsoft to host their own registry and stop using foreign layers?
Greg Gu commented
Now, we have mcr.microsoft.com.