diff --git a/Makefile b/Makefile
index ebeb715..e01eca3 100644
--- a/Makefile
+++ b/Makefile
@@ -83,6 +83,10 @@ install-only:
 
 	install -d $(DESTDIR)/etc/atomic.d
 
+	install -d $(DESTDIR)/etc/containers/registries.d
+
+	install -m 644 default.yaml $(DESTDIR)/etc/containers/registries.d
+
 .PHONY: install
 install: all install-only
 
diff --git a/default.yaml b/default.yaml
new file mode 100644
index 0000000..251acc4
--- /dev/null
+++ b/default.yaml
@@ -0,0 +1,26 @@
+# This is a default registries.d configuration file.  You may
+# add to this file or create additional files in registries.d/.
+#
+# sigstore: indicates a location that is read and write
+# sigstore-staging: indicates a location that is only for write
+#
+# sigstore and sigstore-staging take a value of the following:
+#   sigstore:  {schema}://location
+#
+# For reading signatures, schema may be http, https, or file.
+# For writing signatures, schema may only be file.
+
+# This is the default signature write location for registries.
+default-docker:
+#  sigstore: file:///var/lib/atomic/sigstore
+  sigstore-staging: file:///var/lib/atomic/sigstore
+
+# The 'docker' indicator here is the start of the configuration
+# for docker registries.
+#
+# docker:
+#
+#   privateregistry.com:
+#    sigstore: http://privateregistry.com/sigstore/
+#    sigstore-staging: /mnt/nfs/privateregistry/sigstore
+