diff --git a/kubernetes/bootstrap/talos/heavy-cluster.secret.sops.yaml b/kubernetes/bootstrap/talos/heavy-cluster.secret.sops.yaml
index 388cfc850..3bcc5ef6c 100644
--- a/kubernetes/bootstrap/talos/heavy-cluster.secret.sops.yaml
+++ b/kubernetes/bootstrap/talos/heavy-cluster.secret.sops.yaml
@@ -71,13 +71,8 @@ machine:
         - op: create
           path: /etc/cri/conf.d/20-customization.part
           content: |
-            [plugins."io.containerd.grpc.v1.cri"]
-              enable_unprivileged_ports = true
-              enable_unprivileged_icmp = true
-            [plugins."io.containerd.grpc.v1.cri".containerd]
-              discard_unpacked_layers = false
-            [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
-              discard_unpacked_layers = false
+            [plugins."io.containerd.cri.v1.images"]
+            discard_unpacked_layers = false
         - op: overwrite
           path: /etc/nfsmount.conf
           permissions: 420
@@ -273,8 +268,8 @@ sops:
             dEFneS9QRXhZOVExellFVzRqZk1rK3MKz5yH9jNqLzopMO3ATbN23i3lJSNONkwg
             +4TFzcEwW3WZ1bpE9F7lWM0I1cRGHuz01ZvzMffEkJwp5JK3KWSFsw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-17T17:43:31Z"
-    mac: ENC[AES256_GCM,data:XsZTRbjZrPeCJ+EaycNRfnNGEDu/YUhvavqghkNuzYrwGQgUtsFuwA0oeRoLnGdwTsl+UfVwVxZeQFkWR6fXGXNJ5dWVlHmUr3dddZM3BC0/smaGn95frOt/67slLIPqAEVHOs1ztX0vQ0F2718uLAvCRYwHp2xbrTIWqRsqMWw=,iv:3+afpxnpNHExMYoGHcooFog5wPxlsBukiq0cG/1wpxk=,tag:KkKoExJKsVex0BnK/ic8YA==,type:str]
+    lastmodified: "2024-12-18T22:43:50Z"
+    mac: ENC[AES256_GCM,data:yqcW2js4KntTETch3FCFJHDWK6UMulcKJRdJ0h+Amc6vbEXqwPB3sUXhdVljY2iwhxJM4GZwHptjsToNKCwdzoFunUeg1SVzvcxg6VtLGVAcR6ssHvkJ4wips13nZC0sX4YZEAnmEUV2JvNWC8iwo5wnoVGLnApGKXo2VJlukTk=,iv:0iuWh19a6sNxI3qxVgddyqlsCQoqROIRUL5crY8dCoM=,tag:0wADThsXpJ6aJREBBiMvJw==,type:str]
     pgp: []
     encrypted_regex: ^(token|crt|key|id|secret|secretboxEncryptionSecret|ca)$
     version: 3.9.1