部署kubenetes启动docker容器报错

[root@centos-minion yum.repos.d]# systemctl start docker
Job for docker.service failed because the control process exited with error code. See “systemctl status docker.service” and “journalctl -xe” for details.

systemctl status docker看到提示

[root@centos-minion yum.repos.d]# systemctl status docker
● docker.service - Docker Application Container Engine
   Loaded: loaded (/usr/lib/systemd/system/docker.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since 六 2019-05-11 20:53:05 CST; 6s ago
     Docs: http://docs.docker.com
  Process: 13939 ExecStart=/usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json $OPTIONS $DOCKER_STORAGE_OPTIONS $DOCKER_NETWORK_OPTIONS $ADD_REGISTRY $BLOCK_REGISTRY $INSECURE_REGISTRY $REGISTRIES (code=exited, status=1/FAILURE)
 Main PID: 13939 (code=exited, status=1/FAILURE)

5月 11 20:53:05 centos-minion dockerd-current[13939]: --tlscert string                        Path to TLS certificate file (default "/etc/docker/cert.pem")
5月 11 20:53:05 centos-minion dockerd-current[13939]: --tlskey string                         Path to TLS key file (default "/etc/docker/key.pem")
5月 11 20:53:05 centos-minion dockerd-current[13939]: --tlsverify                             Use TLS and verify the remote
5月 11 20:53:05 centos-minion dockerd-current[13939]: --userland-proxy                        Use userland proxy for loopback traffic (default true)
5月 11 20:53:05 centos-minion dockerd-current[13939]: --userland-proxy-path string            Path to the userland proxy binary
5月 11 20:53:05 centos-minion dockerd-current[13939]: --userns-remap string                   User/Group setting for user namespaces
5月 11 20:53:05 centos-minion dockerd-current[13939]: -v, --version                               Print version information and quit
5月 11 20:53:05 centos-minion dockerd-current[13939]: Run 'dockerd COMMAND --help' for more information on a command.
5月 11 20:53:05 centos-minion dockerd-current[13939]: , Code: 125
5月 11 20:53:05 centos-minion systemd[1]: docker.service failed.

这就是一个比较难搞的问题了，没有太具体的报错。从执行命令看应该是docker的配置参数有问题。
我们把这个命令挖出来：/usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json $OPTIONS $DOCKER_STORAGE_OPTIONS $DOCKER_NETWORK_OPTIONS $ADD_REGISTRY $BLOCK_REGISTRY $INSECURE_REGISTRY $REGISTRIES

去/etc/sysconfig/docker*文件里面找参数，补充完整后收到执行看会报什么错误（若配置文件没有这个参数或者配置为空，命命令上这个参数也就不需要加了）。

[root@centos-minion ~]# /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-false --log-driver=journald --signature-verification=false  --storage-driver overlay2  
Status: unknown flag: --selinux-false
See 'dockerd --help'.

Usage:	dockerd COMMAND

A self-sufficient runtime for containers.

这样就找到问题了，提示“unknown flag: --selinux-false”
打开/etc/sysconfig/docker文件一看原来是配置参数修改错了，改回再重启docker正常了。
刚发也适用同样现象未表露报错的问题。

欢迎查阅《centos部署k8s搭建kubernetes集群》
https://blog.csdn.net/qq_23598037/article/details/90116334