for chosen tools host explicit container images publicly on Harbor and set them up in cesnet cvmfs for caching on nodes
harbor: https://cerit.io/harbor/projects/226/repositories
this should also get rid of tpv rules like:
singularity_default_container_id: "/cvmfs/singularity.metacentrum.cz/RoseTTAFold2/rosettafold_image.sif"
this should resolve issues like:
FATAL: Unable to handle docker://recetox/qcxms-docker:5.2.1 uri: while building SIF from layers: conveyor failed to get: GET https://index.docker.io/v2/recetox/qcxms-docker/manifests/5.2.1: TOOMANYREQUESTS: You have reached your unauthenticated pull rate limit. https://www.docker.com/increase-rate-limit