From e0707b68c61203ff382e9c9b0ae578f47e8ed91d Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Thu, 21 May 2026 01:58:27 -0300
Subject: [PATCH] maintenance(titan-24): start Docker through host systemd

---
 services/maintenance/scripts/titan_24_docker.sh     | 8 ++++++--
 services/maintenance/titan-24-docker-daemonset.yaml | 1 +
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/services/maintenance/scripts/titan_24_docker.sh b/services/maintenance/scripts/titan_24_docker.sh
index b7f2a772..b5652d52 100644
--- a/services/maintenance/scripts/titan_24_docker.sh
+++ b/services/maintenance/scripts/titan_24_docker.sh
@@ -6,6 +6,10 @@ host_sh() {
   chroot /host /bin/sh -c "$*"
 }
 
+host_systemctl() {
+  chroot /host /usr/bin/nsenter -t 1 -m -u -i -n -p /bin/systemctl "$@"
+}
+
 install_docker() {
   host_sh "apt-get update"
   host_sh "DEBIAN_FRONTEND=noninteractive apt-get install -y ca-certificates curl gnupg"
@@ -30,8 +34,8 @@ configure_docker() {
 }
 JSON
   fi
-  host_sh "systemctl daemon-reload"
-  host_sh "systemctl enable --now docker"
+  host_systemctl daemon-reload
+  host_systemctl enable --now docker
 }
 
 if [ ! -x /host/usr/bin/docker ] || ! host_sh "docker version >/dev/null 2>&1"; then
diff --git a/services/maintenance/titan-24-docker-daemonset.yaml b/services/maintenance/titan-24-docker-daemonset.yaml
index e7976b81..51d38139 100644
--- a/services/maintenance/titan-24-docker-daemonset.yaml
+++ b/services/maintenance/titan-24-docker-daemonset.yaml
@@ -17,6 +17,7 @@ spec:
       labels:
         app: titan-24-docker
     spec:
+      hostPID: true
       serviceAccountName: titan-24-docker
       nodeSelector:
         kubernetes.io/hostname: titan-24