coreos/sysext/containerd: configure registry certs.d

Signed-off-by: Kartik Nath Khatri <masterbro770@gmail.com>

Author: DUKartik

sdk_container/src/third_party/coreos-overlay/changelog/changes/2026-08-09-containerd-registry-config.md

@@ -0,0 +1 @@
+- Added containerd registry certificate directory support for `/etc/containerd/certs.d` in the containerd sysext. ([Flatcar#583](https://github.com/flatcar/Flatcar/issues/583))

sdk_container/src/third_party/coreos-overlay/coreos/sysext/containerd/usr/share/containerd/config-cgroupfs.toml

@@ -27,6 +27,9 @@ runtime = "runc"
 # live restore is not supported
 no_shim = false
 
+[plugins."io.containerd.grpc.v1.cri".registry]
+config_path = "/etc/containerd/certs.d"
+
 [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
 # setting runc.options unsets parent settings
 runtime_type = "io.containerd.runc.v2"

sdk_container/src/third_party/coreos-overlay/coreos/sysext/containerd/usr/share/containerd/config.toml

@@ -31,6 +31,9 @@ no_shim = false
 # enable SELinux labeling
 enable_selinux = true
 
+[plugins."io.containerd.grpc.v1.cri".registry]
+config_path = "/etc/containerd/certs.d"
+
 [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
 # setting runc.options unsets parent settings
 runtime_type = "io.containerd.runc.v2"