diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index ab4e60f..342a759 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -51,6 +51,7 @@ jobs:
         context: ./registry/node-update
         tags: |
           ghcr.io/yolean/ystack-registry-node-update:${{ github.sha }}
+          ghcr.io/yolean/ystack-registry-node-update:latest
         platforms: linux/amd64,linux/arm64/v8
         push: true
         cache-from: type=gha
diff --git a/registry/node-update/.dockerignore b/registry/node-update/.dockerignore
new file mode 100644
index 0000000..d5027ad
--- /dev/null
+++ b/registry/node-update/.dockerignore
@@ -0,0 +1,2 @@
+Dockerfile
+*.yaml
diff --git a/registry/node-update/daemonset.yaml b/registry/node-update/daemonset.yaml
new file mode 100644
index 0000000..9f685ed
--- /dev/null
+++ b/registry/node-update/daemonset.yaml
@@ -0,0 +1,31 @@
+# yaml-language-server: $schema=https://github.com/yannh/kubernetes-json-schema/raw/master/v1.27.9/daemonset.json
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: containerd-config
+spec:
+  selector:
+    matchLabels:
+      app: containerd-config
+  template:
+    metadata:
+      labels:
+        app: containerd-config
+      annotations:
+        "cluster-autoscaler.kubernetes.io/safe-to-evict": "true"
+    spec:
+      tolerations:
+      - effect: NoSchedule
+        operator: Exists
+      hostPID: true
+      hostNetwork: true
+      restartPolicy: Never
+      containers:
+      - name: init-container-did-the-work
+        image: k8s.gcr.io/pause:3.6@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db
+        imagePullPolicy: Always
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: etc-containerd
+        hostPath:
+          path: /etc/containerd
diff --git a/registry/node-update/kustomization.yaml b/registry/node-update/kustomization.yaml
new file mode 100644
index 0000000..2ff0ac3
--- /dev/null
+++ b/registry/node-update/kustomization.yaml
@@ -0,0 +1,2 @@
+resources:
+- daemonset.yaml