diff --git a/cluster-api/context/etc/containerd/config.toml b/cluster-api/context/etc/containerd/config.toml
new file mode 100644
index 0000000..bb4fb30
--- /dev/null
+++ b/cluster-api/context/etc/containerd/config.toml
@@ -0,0 +1,13 @@
+# Use config version 2 to enable new configuration fields.
+# Config file is parsed as version 1 by default.
+version = 2
+
+[plugins]
+  [plugins."io.containerd.grpc.v1.cri"]
+    sandbox_image = "registry.k8s.io/pause:3.9"
+  [plugins."io.containerd.grpc.v1.cri".registry]
+    config_path = "/etc/containerd/certs.d"
+  [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
+    runtime_type = "io.containerd.runc.v2"
+  [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
+    SystemdCgroup = true