Convox can pull base images from private registries during the build process.
$ convox registries add registry.example.org username password
Adding registry... OK
$ convox registries
SERVER USERNAME
registry.example.org username
$ convox registries remove registry.example.org
Removing registry... OK