diff --git a/pkg/platform/provider/baremetal/phases/image/image.go b/pkg/platform/provider/baremetal/phases/image/image.go
index 1f74eba29..bf648d264 100644
--- a/pkg/platform/provider/baremetal/phases/image/image.go
+++ b/pkg/platform/provider/baremetal/phases/image/image.go
@@ -57,7 +57,7 @@ func PullKubernetesImages(c *v1.Cluster, s ssh.Interface, option *Option) error
 				return err
 			}
 		} else {
-			cmd = fmt.Sprintf("nerdctl -n k8s.io pull %s", image)
+			cmd = fmt.Sprintf("nerdctl --insecure-registry -n k8s.io pull %s", image)
 			_, err := s.CombinedOutput(cmd)
 			if err != nil {
 				if strings.Contains(err.Error(), "502 Bad Gateway") {