The first image is fully fetched since the local storage is empty and there is no deduplication happening. The second pull fetches only the files that are not already present in the storage (that is the nginx package). Files that are already present in the storage are deduplicated with reflinks.