I've been investigating alternatives, and apart from the obvious mirroring images to my {Elastic,Google Cloud,Azure} Container Registry... I found this:
https://github.com/miguelmota/ipdr
Adding an encryption layer would probably be needed for private images, but overall the idea of using IPFS for container images sounds like a great fit!