Pulling container images on a node that has no internet

Fifth in the KMQ series. Second in the homelab infrastructure subseries that runs alongside it. Previous in KMQ: the broker from primitives , the ring buffer and backpressure , the ack sidecar retry loop , the TLS sidecar loop . Previous in infra: a private OCI registry and a pull-through cache . The infra post set up a private registry on a LAN host and a cache for three public registries on the…