NON-RA is enough
"I still think married jointly or separately either way the spouse needs itin. I don't think itin can be obtained from outside US. Quote from W-7 instuction."
If you married filing separately, you don't really need your spouse's itin. You can simply put a NON-RA on the line where you normally should put your spouse' SSN or itin. This should definitely be ok since I have already used this way to file my tax return for several years. And the IRS staff told me to do it this way. And my tax returns were audited.