containerd can use mirrors., but as the FAQ tells:

nerdctl ignores [plugins."io.containerd.grpc.v1.cri"] config

Expected behavior, because nerdctl does not use CRI (Kubernetes Container Runtime Interface) API.

See the questions below for how to configure nerdctl.

How to configure registry mirrors in nerdctl?

( Triggered by kubernetes-sigs/kubespray#8375).

(NB: this is similar to older issue #199)