maintenance(titan-24): start Docker through host systemd

services/maintenance/scripts/titan_24_docker.sh

@@ -6,6 +6,10 @@ host_sh() {
   chroot /host /bin/sh -c "$*"
 }
 
+host_systemctl() {
+  chroot /host /usr/bin/nsenter -t 1 -m -u -i -n -p /bin/systemctl "$@"
+}
+
 install_docker() {
   host_sh "apt-get update"
   host_sh "DEBIAN_FRONTEND=noninteractive apt-get install -y ca-certificates curl gnupg"
@@ -30,8 +34,8 @@ configure_docker() {
 }
 JSON
   fi
-  host_sh "systemctl daemon-reload"
-  host_sh "systemctl enable --now docker"
+  host_systemctl daemon-reload
+  host_systemctl enable --now docker
 }
 
 if [ ! -x /host/usr/bin/docker ] || ! host_sh "docker version >/dev/null 2>&1"; then

services/maintenance/titan-24-docker-daemonset.yaml

@@ -17,6 +17,7 @@ spec:
       labels:
         app: titan-24-docker
     spec:
+      hostPID: true
       serviceAccountName: titan-24-docker
       nodeSelector:
         kubernetes.io/hostname: titan-24