diff --git a/hack/generate-asset-hashes.sh b/hack/generate-asset-hashes.sh
index 708c4797d8..9d0328babe 100755
--- a/hack/generate-asset-hashes.sh
+++ b/hack/generate-asset-hashes.sh
@@ -77,6 +77,7 @@ EOF
     go run ./pkg/assets/assetdata/tools/cmd/generatefileassets \
       --base https://github.com/opencontainers/runc/releases/download/ \
       --prefix "v${version}/" \
+      --exclude "**/*.386" \
       --exclude "**/*.armel" \
       --exclude "**/*.armhf" \
       --exclude "**/*.ppc64le" \
@@ -88,6 +89,70 @@ EOF
   done
 }
 
+function generate_containerd_hashes() {
+  prefix=$1
+  max_patch=$2
+
+  cat > "${REPO_ROOT}/pkg/assets/assetdata/containerd-${prefix}.yaml" <<EOF
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://github.com/containerd/containerd/releases/download/
+
+files:
+EOF
+
+  for ((patch = 0 ; patch <= max_patch ; patch++ )); do
+    version="${prefix}.${patch}"
+    echo "containerd ${version}"
+
+    {
+      echo "# containerd ${version}"
+      go run ./pkg/assets/assetdata/tools/cmd/generatefileassets \
+        --base https://github.com/containerd/containerd/releases/download/ \
+        --prefix "v${version}/" \
+        --sums "https://github.com/containerd/containerd/releases/download/v${version}/containerd-${version}-linux-amd64.tar.gz.sha256sum" \
+        | grep -v "^files:"
+      go run ./pkg/assets/assetdata/tools/cmd/generatefileassets \
+        --base https://github.com/containerd/containerd/releases/download/ \
+        --prefix "v${version}/" \
+        --sums "https://github.com/containerd/containerd/releases/download/v${version}/containerd-${version}-linux-arm64.tar.gz.sha256sum" \
+        | grep -v "^files:"
+    } >> "${REPO_ROOT}/pkg/assets/assetdata/containerd-${prefix}.yaml"
+  done
+}
+
+function generate_cni_hashes() {
+  prefix=$1
+  patch=$2
+
+  cat > "${REPO_ROOT}/pkg/assets/assetdata/cni-${prefix}.yaml" <<EOF
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://storage.googleapis.com/k8s-artifacts-cni/release/
+
+files:
+EOF
+
+  version="${prefix}.${patch}"
+  echo "cni ${version}"
+
+  {
+    echo "# cni ${version}"
+    go run ./pkg/assets/assetdata/tools/cmd/generatefileassets \
+      --base https://storage.googleapis.com/k8s-artifacts-cni/release/ \
+      --prefix "v${version}/" \
+      --sums "https://storage.googleapis.com/k8s-artifacts-cni/release/v${version}/cni-plugins-linux-amd64-v${version}.tgz.sha256" \
+      | grep -v "^files:"
+    go run ./pkg/assets/assetdata/tools/cmd/generatefileassets \
+      --base https://storage.googleapis.com/k8s-artifacts-cni/release/ \
+      --prefix "v${version}/" \
+      --sums "https://storage.googleapis.com/k8s-artifacts-cni/release/v${version}/cni-plugins-linux-arm64-v${version}.tgz.sha256" \
+      | grep -v "^files:"
+  } >> "${REPO_ROOT}/pkg/assets/assetdata/cni-${prefix}.yaml"
+}
+
 # Generate k8s hashes.
 # The first argument is the major and minor version, the second is the maximum patch version.
 generate_k8s_hashes 1.25 16
@@ -100,4 +165,17 @@ generate_k8s_hashes 1.31 3
 
 # Generate runc hashes.
 # The first argument is the major and minor version, the second is the maximum patch version.
-generate_runc_hashes 1.1 14
+generate_runc_hashes 1.1 15
+generate_runc_hashes 1.2 4
+
+# Generate containerd hashes.
+generate_containerd_hashes 1.7 25
+generate_containerd_hashes 2.0 1
+
+# Generate CNI network plugins hashes.
+generate_cni_hashes 0.9 1
+generate_cni_hashes 1.2 0
+generate_cni_hashes 1.3 0
+generate_cni_hashes 1.4 1
+generate_cni_hashes 1.5 1
+generate_cni_hashes 1.6 1
diff --git a/pkg/assets/assetdata/cni-1.2.yaml b/pkg/assets/assetdata/cni-1.2.yaml
new file mode 100644
index 0000000000..73e5c1b78e
--- /dev/null
+++ b/pkg/assets/assetdata/cni-1.2.yaml
@@ -0,0 +1,11 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://storage.googleapis.com/k8s-artifacts-cni/release/
+
+files:
+# cni 1.2.0
+- name: v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz
+  sha256: f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37
+- name: v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
+  sha256: 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57
diff --git a/pkg/assets/assetdata/cni-1.3.yaml b/pkg/assets/assetdata/cni-1.3.yaml
new file mode 100644
index 0000000000..e9d1a6633a
--- /dev/null
+++ b/pkg/assets/assetdata/cni-1.3.yaml
@@ -0,0 +1,11 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://storage.googleapis.com/k8s-artifacts-cni/release/
+
+files:
+# cni 1.3.0
+- name: v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz
+  sha256: 754a71ed60a4bd08726c3af705a7d55ee3df03122b12e389fdba4bea35d7dd7e
+- name: v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz
+  sha256: de7a666fd6ad83a228086bd55756db62ef335a193d1b143d910b69f079e30598
diff --git a/pkg/assets/assetdata/cni-1.4.yaml b/pkg/assets/assetdata/cni-1.4.yaml
new file mode 100644
index 0000000000..13dd2ea0eb
--- /dev/null
+++ b/pkg/assets/assetdata/cni-1.4.yaml
@@ -0,0 +1,11 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://storage.googleapis.com/k8s-artifacts-cni/release/
+
+files:
+# cni 1.4.1
+- name: v1.4.1/cni-plugins-linux-amd64-v1.4.1.tgz
+  sha256: 1511f6c003ace805eafeb1132727791326283cff88a923d76329e1892bba7a10
+- name: v1.4.1/cni-plugins-linux-arm64-v1.4.1.tgz
+  sha256: 72644e13557cda8a5b39baf97fc5e93d23fdf7baba7700000e7e9efd8bdf9234
diff --git a/pkg/assets/assetdata/cni-1.5.yaml b/pkg/assets/assetdata/cni-1.5.yaml
new file mode 100644
index 0000000000..1151990f29
--- /dev/null
+++ b/pkg/assets/assetdata/cni-1.5.yaml
@@ -0,0 +1,11 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://storage.googleapis.com/k8s-artifacts-cni/release/
+
+files:
+# cni 1.5.1
+- name: v1.5.1/cni-plugins-linux-amd64-v1.5.1.tgz
+  sha256: 77baa2f669980a82255ffa2f2717de823992480271ee778aa51a9c60ae89ff9b
+- name: v1.5.1/cni-plugins-linux-arm64-v1.5.1.tgz
+  sha256: c2a292714d0fad98a3491ae43df8ad58354b3c0bdf5d5a3e281777967c70fcff
diff --git a/pkg/assets/assetdata/cni-1.6.yaml b/pkg/assets/assetdata/cni-1.6.yaml
new file mode 100644
index 0000000000..a7d5d66a41
--- /dev/null
+++ b/pkg/assets/assetdata/cni-1.6.yaml
@@ -0,0 +1,11 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://storage.googleapis.com/k8s-artifacts-cni/release/
+
+files:
+# cni 1.6.1
+- name: v1.6.1/cni-plugins-linux-amd64-v1.6.1.tgz
+  sha256: 2503ce29ac445715ebe146073f45468153f9e28f45fa173cb060cfd9e735f563
+- name: v1.6.1/cni-plugins-linux-arm64-v1.6.1.tgz
+  sha256: f0f440b968ab50ad13d9d42d993ba98ec30b2ec666846f4ef1bddc7646a701cc
diff --git a/pkg/assets/assetdata/containerd-1.7.yaml b/pkg/assets/assetdata/containerd-1.7.yaml
new file mode 100644
index 0000000000..c9c1ebdb2e
--- /dev/null
+++ b/pkg/assets/assetdata/containerd-1.7.yaml
@@ -0,0 +1,136 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://github.com/containerd/containerd/releases/download/
+
+files:
+# containerd 1.7.0
+- name: v1.7.0/containerd-1.7.0-linux-amd64.tar.gz
+  sha256: b068b05d58025dc9f2fc336674cac0e377a478930f29b48e068f97c783a423f0
+- name: v1.7.0/containerd-1.7.0-linux-arm64.tar.gz
+  sha256: e7e5be2d9c92e076f1e2e15c9f0a6e0609ddb75f7616999b843cba92d01e4da2
+# containerd 1.7.1
+- name: v1.7.1/containerd-1.7.1-linux-amd64.tar.gz
+  sha256: 9504771bcb816d3b27fab37a6cf76928ee5e95a31eb41510a7d10ae726e01e85
+- name: v1.7.1/containerd-1.7.1-linux-arm64.tar.gz
+  sha256: 1f828dc063e3c24b0840b284c5635b5a11b1197d564c97f9e873b220bab2b41b
+# containerd 1.7.2
+- name: v1.7.2/containerd-1.7.2-linux-amd64.tar.gz
+  sha256: 2755c70152ab40856510b4549c2dd530e15f5355eb7bf82868e813c9380e22a7
+- name: v1.7.2/containerd-1.7.2-linux-arm64.tar.gz
+  sha256: d75a4ca53d9addd0b2c50172d168b12957e18b2d8b802db2658f2767f15889a6
+# containerd 1.7.3
+- name: v1.7.3/containerd-1.7.3-linux-amd64.tar.gz
+  sha256: de7f61aacba88ee647a7dcde1ca77672ec44ab9fb3e58ae90c0efc9b2d8f3068
+- name: v1.7.3/containerd-1.7.3-linux-arm64.tar.gz
+  sha256: 85d2eaedabff57ac1d7cd3884bf232155c4c46491f6b071982e4f7b684b74445
+# containerd 1.7.4
+- name: v1.7.4/containerd-1.7.4-linux-amd64.tar.gz
+  sha256: fc070fabfe3539d46ae5db160d18381270928b3f912e2e800947e9fbd43f510c
+- name: v1.7.4/containerd-1.7.4-linux-arm64.tar.gz
+  sha256: ea5a04379bd4252fc1e0b7b37f69cd516350c5269054483535d6eab7a0c79d2e
+# containerd 1.7.5
+- name: v1.7.5/containerd-1.7.5-linux-amd64.tar.gz
+  sha256: 33609ae2d5838bc5798306a1ac30d7f2c6a8cff785ca6253d2be8a8b3ccbab25
+- name: v1.7.5/containerd-1.7.5-linux-arm64.tar.gz
+  sha256: 98fc6990820d52d45b56ea2cda808157d4e61bb30ded96887634644c03025fa9
+# containerd 1.7.6
+- name: v1.7.6/containerd-1.7.6-linux-amd64.tar.gz
+  sha256: 58408cfa025003e671b0af72183b963363d519543d0d0ba186037e9c57489ffe
+- name: v1.7.6/containerd-1.7.6-linux-arm64.tar.gz
+  sha256: d844a1c8b993e7e9647f73b9814567004dce1287c0529ce55c50519490eafcce
+# containerd 1.7.7
+- name: v1.7.7/containerd-1.7.7-linux-amd64.tar.gz
+  sha256: 371de359d6102c51f6ee2361d08297948d134ce7379e01cb965ceeffa4365fba
+- name: v1.7.7/containerd-1.7.7-linux-arm64.tar.gz
+  sha256: 0a104f487193665d2681fcb5ed83f2baa5f97849fe2661188da835c9d4eaf9e3
+# containerd 1.7.8
+- name: v1.7.8/containerd-1.7.8-linux-amd64.tar.gz
+  sha256: 5f1d017a5a7359514d6187d6656e88fb2a592d107e6298db7963dbddb9a111d9
+- name: v1.7.8/containerd-1.7.8-linux-arm64.tar.gz
+  sha256: 3fc551e8f51150804d80cc1958a271bd2252b6334f0355244d0faa5da7fa55d1
+# containerd 1.7.9
+- name: v1.7.9/containerd-1.7.9-linux-amd64.tar.gz
+  sha256: ccd5b434393666f6ebbc90eea959ffd3e61958a1e3e1cc830a678f040142d4b0
+- name: v1.7.9/containerd-1.7.9-linux-arm64.tar.gz
+  sha256: 09ca326dee14e00c439137071747c15cc280480e2c26c1e82698c992dd1889c6
+# containerd 1.7.10
+- name: v1.7.10/containerd-1.7.10-linux-amd64.tar.gz
+  sha256: eacb0296bff2ae5225a18492dcb32fb28ad4a1fe0a39ea9073367c7e43dc5838
+- name: v1.7.10/containerd-1.7.10-linux-arm64.tar.gz
+  sha256: 0667b12a04a896a61cf508a4a77190c280f4a1fa35f38c8a4ba63f605b5ec375
+# containerd 1.7.11
+- name: v1.7.11/containerd-1.7.11-linux-amd64.tar.gz
+  sha256: d66161d54546fad502fd50a13fcb79efff033fcd895adc9c44762680dcde4e69
+- name: v1.7.11/containerd-1.7.11-linux-arm64.tar.gz
+  sha256: 5eae27cce38a14be5390d4035127aa11416bc5ae592a9ff25b11870872ce1159
+# containerd 1.7.12
+- name: v1.7.12/containerd-1.7.12-linux-amd64.tar.gz
+  sha256: 6a24d8b996533fa1b0d7348fe9813a78cd01fa16cff865a961ad0d556f5cd665
+- name: v1.7.12/containerd-1.7.12-linux-arm64.tar.gz
+  sha256: 8a1b35a521d071a8828f63fe007a51e5b7ac863a1195f5dee32543b1a9d5f2b6
+# containerd 1.7.13
+- name: v1.7.13/containerd-1.7.13-linux-amd64.tar.gz
+  sha256: c2371c009dd8b7738663333d91e5ab50d204f8bcae24201f45d59060d12c3a23
+- name: v1.7.13/containerd-1.7.13-linux-arm64.tar.gz
+  sha256: 118759e398f35337109592b4d237538872dc12a207d38832b9d04515d0acbc4d
+# containerd 1.7.14
+- name: v1.7.14/containerd-1.7.14-linux-amd64.tar.gz
+  sha256: 48e0d9747cd51cb90e0b278d100397653d9f2e765effca194427e4796395b240
+- name: v1.7.14/containerd-1.7.14-linux-arm64.tar.gz
+  sha256: 44df66d0a0332465e7d15e90b974cd4f08d059dfa26652218ed9485390f47f9e
+# containerd 1.7.15
+- name: v1.7.15/containerd-1.7.15-linux-amd64.tar.gz
+  sha256: ea27e6454954bd9cb62a70b0a40eb085ae9c96cb8c075a74910102b33586e07d
+- name: v1.7.15/containerd-1.7.15-linux-arm64.tar.gz
+  sha256: 5cc8bd8f3d9803ef0ef701596e89d62ad6850a2544e722842f4533642df36d87
+# containerd 1.7.16
+- name: v1.7.16/containerd-1.7.16-linux-amd64.tar.gz
+  sha256: 4f4f2c3c7d14fd59a404961a3a3341303c2fdeeba0e78808c209f606e828f99c
+- name: v1.7.16/containerd-1.7.16-linux-arm64.tar.gz
+  sha256: 2d4373de40a6f58cd0f29377c0257b35697a987248e6268520586996771d7a75
+# containerd 1.7.17
+- name: v1.7.17/containerd-1.7.17-linux-amd64.tar.gz
+  sha256: 04cf937349f82d29fe98553ff45a7e9ea2ed6b81fe6514e3679cf263b50409ff
+- name: v1.7.17/containerd-1.7.17-linux-arm64.tar.gz
+  sha256: 8d9749985796a208e860afe331ec77cb485566104e5cc7c0b5e9e82ec7681969
+# containerd 1.7.18
+- name: v1.7.18/containerd-1.7.18-linux-amd64.tar.gz
+  sha256: a24b05b341c155a0ec367d3d0fd1d437c09a0261dffdecc0e44e9abbf2d02aca
+- name: v1.7.18/containerd-1.7.18-linux-arm64.tar.gz
+  sha256: e80ce87b469af03b3bdcf68b95f0f4a303787ae247581bcd42f04acf1ad4c24d
+# containerd 1.7.19
+- name: v1.7.19/containerd-1.7.19-linux-amd64.tar.gz
+  sha256: 97f75e60f0ad19d335b1d23385835df721cad4492740d50576997f2717dc3f94
+- name: v1.7.19/containerd-1.7.19-linux-arm64.tar.gz
+  sha256: 1839e6f7cd7c62d9df3ef3deac3f404cdd5cd47bbdf8acfeb0b0f3776eb20002
+# containerd 1.7.20
+- name: v1.7.20/containerd-1.7.20-linux-amd64.tar.gz
+  sha256: e09410787b6f392748959177a84e024424f75d7aff33ea1c5b783f2260edce67
+- name: v1.7.20/containerd-1.7.20-linux-arm64.tar.gz
+  sha256: cf80cd305f7d1c23aaf0c57bc1c1e37089cad9130d533db6fe968cdebd16c759
+# containerd 1.7.21
+- name: v1.7.21/containerd-1.7.21-linux-amd64.tar.gz
+  sha256: 3d1fcdfd0b141f4dc4916b7aee7f9a7773dc344baffc8954e1ca66b1adc5c120
+- name: v1.7.21/containerd-1.7.21-linux-arm64.tar.gz
+  sha256: 7b6b67d998eb86856d23df5d57269c054539072bbb27677975cf78269b2c5c10
+# containerd 1.7.22
+- name: v1.7.22/containerd-1.7.22-linux-amd64.tar.gz
+  sha256: f8b2d935d1f86003f4e0c1af3b9f0d2820bacabe6dc9f562785b74af24c5e468
+- name: v1.7.22/containerd-1.7.22-linux-arm64.tar.gz
+  sha256: 48d0a8461ae829b12b07c3663b14b70287d0607a0792719c51b4e4dd700b02ce
+# containerd 1.7.23
+- name: v1.7.23/containerd-1.7.23-linux-amd64.tar.gz
+  sha256: 8a0de43d9313aef2ebdccc0ffa49461a4a28139a2c0ef104c3c847f6f37c8119
+- name: v1.7.23/containerd-1.7.23-linux-arm64.tar.gz
+  sha256: 6a66b5e63a5e88ff7eeb478ccaca9083d44e51e1d7261ae183fe5951a6226ccd
+# containerd 1.7.24
+- name: v1.7.24/containerd-1.7.24-linux-amd64.tar.gz
+  sha256: 1a94f15139f37633f39e24f08a4071f4533b285df3cbee6478972d26147bcaef
+- name: v1.7.24/containerd-1.7.24-linux-arm64.tar.gz
+  sha256: 420406d2b34ebb422ab3755fbeede59bf3bfcfccf5cfa584b558c93769d99064
+# containerd 1.7.25
+- name: v1.7.25/containerd-1.7.25-linux-amd64.tar.gz
+  sha256: 02990fa281c0a2c4b073c6d2415d264b682bd693aa7d86c5d8eb4b86d684a18c
+- name: v1.7.25/containerd-1.7.25-linux-arm64.tar.gz
+  sha256: e9201d478e4c931496344b779eb6cb40ce5084ec08c8fff159a02cabb0c6b9bf
diff --git a/pkg/assets/assetdata/containerd-2.0.yaml b/pkg/assets/assetdata/containerd-2.0.yaml
new file mode 100644
index 0000000000..12338b1fc8
--- /dev/null
+++ b/pkg/assets/assetdata/containerd-2.0.yaml
@@ -0,0 +1,16 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://github.com/containerd/containerd/releases/download/
+
+files:
+# containerd 2.0.0
+- name: v2.0.0/containerd-2.0.0-linux-amd64.tar.gz
+  sha256: 6f8da716941f7e89315cefaa6e5a8f1ff10b323ff46611313c455df7ab1ebee1
+- name: v2.0.0/containerd-2.0.0-linux-arm64.tar.gz
+  sha256: 2a00b1553f38aa9e716d61316b661961c2fbfbb7aad7bd73b377be5725ecc0f1
+# containerd 2.0.1
+- name: v2.0.1/containerd-2.0.1-linux-amd64.tar.gz
+  sha256: 85061a5ce1b306292d5a64f85d5cd3aff93d0982737a1069d370dd6cb7bbfd09
+- name: v2.0.1/containerd-2.0.1-linux-arm64.tar.gz
+  sha256: b07120ae227b52edfdb54131d44b13b987b39e8c1f740b0c969b7701e0fad4fa
diff --git a/pkg/assets/assetdata/runc-1.2.yaml b/pkg/assets/assetdata/runc-1.2.yaml
new file mode 100644
index 0000000000..a1b308ecd0
--- /dev/null
+++ b/pkg/assets/assetdata/runc-1.2.yaml
@@ -0,0 +1,33 @@
+# This file is generated by generate-asset-hashes.sh
+
+filestores:
+- base: https://github.com/opencontainers/runc/releases/download/
+
+files:
+# runc 1.2.0
+- name: v1.2.0/runc.amd64
+  sha256: 3bbb68e49bc89dd2607f11d2ff0fa699963ebada39c32ad8a6aab0d40435c1ed
+- name: v1.2.0/runc.arm64
+  sha256: 3d4f66dc1d91f1b2a46713d185a506a604f1fe9f2f2b89c281eb1c5c13677ff0
+# runc 1.2.1
+- name: v1.2.1/runc.amd64
+  sha256: b106d49c60e688022f5909432a77bd3260f29687199d47213ed87269588af781
+- name: v1.2.1/runc.arm64
+  sha256: 8c0d81c80ffdaab986629a9c787d8468ab41851e7aab8f9617a4c3674e192aaa
+# runc 1.2.2
+- name: v1.2.2/SHA512
+  sha256: 'Hash:'
+- name: v1.2.2/runc.amd64
+  sha256: a34f5ab4fc1df1f456293c3d797a76f2d41cf3cd970bb49fc53ba94bbc8a5cf6
+- name: v1.2.2/runc.arm64
+  sha256: bfd3e6c58bd6060eaa725520c31cbc8f6386ac7606e65bfa7fe9084100aa1789
+# runc 1.2.3
+- name: v1.2.3/runc.amd64
+  sha256: e6e8c8049b1910fce58fa68c057aaa5f42cee2a73834df5e59e5da7612d2739d
+- name: v1.2.3/runc.arm64
+  sha256: 4ef19ab21ce1ae5a01e1d3fa5b005e45cdf59f5d3ab32541c9e262cb2b2d3451
+# runc 1.2.4
+- name: v1.2.4/runc.amd64
+  sha256: e83565aa78ec8f52a4d2b4eb6c4ca262b74c5f6770c1f43670c3029c20175502
+- name: v1.2.4/runc.arm64
+  sha256: 285f6c4c3de1d78d9f536a0299ae931219527b2ebd9ad89df5a1072896b7e82a