Allow redeploy for "latest" docker tag in Nexus OSS

I'm using nexus to host both maven and docker artifacts. For the docker production artifacts I'd like to turn on "disable redeploy" to ensure the image can never change on the nexus server once it is potentially in production.

However, enabling "disable redeploy" appears to make it impossible to re-publish the "latest" tag to point to the latest version.

When trying to push I get obscure errors on the client such as blob upload invalid: blob upload invalid.

Is it possible to disable redeploy to concrete version tags, while allowing on tags like "latest"

Can Nexus hold docker images?

Nexus Repository supports Docker images and Helm 3 repositories with Proxy, Hosted, and Group repositories, allowing users advanced container management capabilities across development teams.

In sonartype version 3.21.1 this feature has been added. When the Disable redeploy policy is selected , we get new option: Allow redeploying the 'latest' tag but defer to the Deployment Policy for all other tags.

sonartype