I think running a private registry server already fixes that.

You can build your docker image, push it to your registry, and all the production machines will only have to pull the new layers.