Containerd allows setting a directory for its CRI mirror configuration. Any configuration placed in this directory will be hot reloaded by Containerd. Unfortunately the directory setting requires a restart of Containerd to take effect.

Including the following in the Containerd configuration by default would solve this.

```toml

version = 2

[plugins."io.containerd.grpc.v1.cri".registry]

config_path = "/etc/containerd/certs.d"

```

Having this set is useful for projects like Spegel which makes use of CRI mirror configuration to function.