diff --git a/templates/master/01-master-container-runtime/_base/files/crio.yaml b/templates/master/01-master-container-runtime/_base/files/crio.yaml
index 315172252d..357a5fc5b8 100644
--- a/templates/master/01-master-container-runtime/_base/files/crio.yaml
+++ b/templates/master/01-master-container-runtime/_base/files/crio.yaml
@@ -106,3 +106,6 @@ contents:
       "processes_defunct",
       "default_runtime"
     ]
+
+    [crio.checkpoint_restore]
+    container_level_enabled = "checkpoint_only"
diff --git a/templates/worker/01-worker-container-runtime/_base/files/crio.yaml b/templates/worker/01-worker-container-runtime/_base/files/crio.yaml
index 7829a1c7a5..357a5fc5b8 100644
--- a/templates/worker/01-worker-container-runtime/_base/files/crio.yaml
+++ b/templates/worker/01-worker-container-runtime/_base/files/crio.yaml
@@ -17,12 +17,12 @@ contents:
     default_env = [
         "NSS_SDB_USE_CACHE=no",
     ]
+    default_runtime = "crun"
     log_level = "info"
     cgroup_manager = "systemd"
     default_sysctls = [
         "net.ipv4.ping_group_range=0 2147483647",
     ]
-    default_runtime = "crun"
     hooks_dir = [
         "/etc/containers/oci/hooks.d",
         "/run/containers/oci/hooks.d",
@@ -106,3 +106,6 @@ contents:
       "processes_defunct",
       "default_runtime"
     ]
+
+    [crio.checkpoint_restore]
+    container_level_enabled = "checkpoint_only"