diff --git a/pkgs/containerd/nerdctl/pkg.yaml b/pkgs/containerd/nerdctl/pkg.yaml
index 2c1c6bf270c..77eafe13e21 100644
--- a/pkgs/containerd/nerdctl/pkg.yaml
+++ b/pkgs/containerd/nerdctl/pkg.yaml
@@ -1,5 +1,7 @@
 packages:
-  - name: containerd/nerdctl@v2.0.4
+  - name: containerd/nerdctl@v2.0.5
+  - name: containerd/nerdctl
+    version: v2.0.4
   - name: containerd/nerdctl
     version: v0.8.1
   - name: containerd/nerdctl
diff --git a/pkgs/containerd/nerdctl/registry.yaml b/pkgs/containerd/nerdctl/registry.yaml
index e04bb8ad29a..32e3372a6f6 100644
--- a/pkgs/containerd/nerdctl/registry.yaml
+++ b/pkgs/containerd/nerdctl/registry.yaml
@@ -24,6 +24,17 @@ packages:
           algorithm: sha256
         supported_envs:
           - linux
+      - version_constraint: semver("<= 2.0.4")
+        asset: nerdctl-{{trimV .Version}}-{{.OS}}-{{.Arch}}.{{.Format}}
+        format: tar.gz
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: SHA256SUMS
+          algorithm: sha256
+        supported_envs:
+          - linux
+          - windows/amd64
       - version_constraint: "true"
         asset: nerdctl-{{trimV .Version}}-{{.OS}}-{{.Arch}}.{{.Format}}
         format: tar.gz
@@ -32,6 +43,8 @@ packages:
           type: github_release
           asset: SHA256SUMS
           algorithm: sha256
+        github_artifact_attestations:
+          signer_workflow: containerd/nerdctl/.github/workflows/release.yml
         supported_envs:
           - linux
           - windows/amd64
diff --git a/registry.yaml b/registry.yaml
index bfae083396e..02e6dc4b967 100644
--- a/registry.yaml
+++ b/registry.yaml
@@ -21210,6 +21210,17 @@ packages:
           algorithm: sha256
         supported_envs:
           - linux
+      - version_constraint: semver("<= 2.0.4")
+        asset: nerdctl-{{trimV .Version}}-{{.OS}}-{{.Arch}}.{{.Format}}
+        format: tar.gz
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: SHA256SUMS
+          algorithm: sha256
+        supported_envs:
+          - linux
+          - windows/amd64
       - version_constraint: "true"
         asset: nerdctl-{{trimV .Version}}-{{.OS}}-{{.Arch}}.{{.Format}}
         format: tar.gz
@@ -21218,6 +21229,8 @@ packages:
           type: github_release
           asset: SHA256SUMS
           algorithm: sha256
+        github_artifact_attestations:
+          signer_workflow: containerd/nerdctl/.github/workflows/release.yml
         supported_envs:
           - linux
           - windows/amd64