diff --git a/pkg/webhook/operatingsystemconfig/ensurer.go b/pkg/webhook/operatingsystemconfig/ensurer.go
index 7fd69032..4a8a00ed 100644
--- a/pkg/webhook/operatingsystemconfig/ensurer.go
+++ b/pkg/webhook/operatingsystemconfig/ensurer.go
@@ -116,7 +116,7 @@ func (e *ensurer) EnsureAdditionalUnits(ctx context.Context, gctx gcontext.Garde
 
 	unit := extensionsv1alpha1.Unit{
 		Name:    "configure-containerd-registries.service",
-		Command: pointer.String("start"),
+		Command: extensionsv1alpha1.UnitCommandPtr(extensionsv1alpha1.CommandStart),
 		Enable:  pointer.Bool(true),
 		Content: pointer.String(`[Unit]
 Description=Configures containerd registries
diff --git a/pkg/webhook/operatingsystemconfig/ensurer_test.go b/pkg/webhook/operatingsystemconfig/ensurer_test.go
index d818336f..83a170d9 100644
--- a/pkg/webhook/operatingsystemconfig/ensurer_test.go
+++ b/pkg/webhook/operatingsystemconfig/ensurer_test.go
@@ -333,7 +333,7 @@ func configureContainerdRegistriesFile(script string) extensionsv1alpha1.File {
 func configureContainerdRegistriesUnit(args string) extensionsv1alpha1.Unit {
 	return extensionsv1alpha1.Unit{
 		Name:    "configure-containerd-registries.service",
-		Command: pointer.String("start"),
+		Command: extensionsv1alpha1.UnitCommandPtr(extensionsv1alpha1.CommandStart),
 		Enable:  pointer.Bool(true),
 		Content: pointer.String(`[Unit]
 Description=Configures containerd registries