diff --git a/bootstrap/cluster/main.tf b/bootstrap/cluster/main.tf
index 9b32d89..34ad772 100644
--- a/bootstrap/cluster/main.tf
+++ b/bootstrap/cluster/main.tf
@@ -114,6 +114,11 @@ DOCKER_SOURCES
     sudo apt-get remove -y containerd runc || true
   fi
 
+  if dpkg -s containerd.io >/dev/null 2>&1; then
+    sudo apt-mark hold containerd.io
+    return 0
+  fi
+
   apt_get update || {
     diagnose_apt_network "APT update failed before installing containerd.io" "containerd.io"
     exit 1
@@ -672,6 +677,11 @@ DOCKER_SOURCES
     sudo apt-get remove -y containerd runc || true
   fi
 
+  if dpkg -s containerd.io >/dev/null 2>&1; then
+    sudo apt-mark hold containerd.io
+    return 0
+  fi
+
   apt_get update || {
     diagnose_apt_network "APT update failed before installing containerd.io" "containerd.io"
     exit 1