2024年笔记--centos docker离线安装启动失败
Failed to start Docker Application Container Engine
错误如下：
[root@el70 docker]# systemctl start docker.service
Job for docker.service failed because start of the service was attempted too often. See "systemctl status docker.service" and "journalctl -xe" for details.
To force a start use "systemctl reset-failed docker.service" followed by "systemctl start docker.service" again.
[root@el70 docker]# journalctl -xe
Feb 06 16:15:36 el70 dockerd[2524]: time="2024-02-06T16:15:36.044378290+08:00" level=info msg="[core] [Channel #1] Channel deleted" module=grp
Feb 06 16:15:36 el70 dockerd[2524]: time="2024-02-06T16:15:36.044158542+08:00" level=info msg="stopping event stream following graceful shutdo
Feb 06 16:15:36 el70 dockerd[2524]: time="2024-02-06T16:15:36.044822884+08:00" level=info msg="[core] [Channel #7 SubChannel #8] Subchannel Co
Feb 06 16:15:36 el70 dockerd[2524]: time="2024-02-06T16:15:36.044928467+08:00" level=info msg="[core] [Channel #7] Channel Connectivity change
Feb 06 16:15:37 el70 dockerd[2524]: failed to start daemon: Error initializing network controller: Error creating default "bridge" network: Fa
Feb 06 16:15:37 el70 systemd[1]: docker.service: main process exited, code=exited, status=1/FAILURE
Feb 06 16:15:37 el70 systemd[1]: Failed to start Docker Application Container Engine.
-- Subject: Unit docker.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit docker.service has failed.
--
-- The result is failed.
Feb 06 16:15:37 el70 systemd[1]: Unit docker.service entered failed state.
Feb 06 16:15:37 el70 systemd[1]: docker.service failed.
Feb 06 16:15:37 el70 systemd[1]: docker.service holdoff time over, scheduling restart.
Feb 06 16:15:37 el70 systemd[1]: Stopped Docker Application Container Engine.
-- Subject: Unit docker.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit docker.service has finished shutting down.
Feb 06 16:15:37 el70 systemd[1]: start request repeated too quickly for docker.service
Feb 06 16:15:37 el70 systemd[1]: Failed to start Docker Application Container Engine.
-- Subject: Unit docker.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
解决分析过程：
再打开一个ssh连接窗口，执行命令tail -200f /var/log/messages
然后在原窗口中执行 systemctl start docker 观察新窗口中的日志。
我这里看到的有关错误日志内容如下：
Feb 6 16:22:54 el70 firewalld: 2024-02-06 16:22:54 ERROR: INVALID_TYPE: structure size mismatch 16 != 13
Feb 6 16:22:54 el70 firewalld: 2024-02-06 16:22:54 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -C FORWARD -j DOCKER-ISOLATION' failed: iptables v1.4.21: Couldn't load target `DOCKER-ISOLATION':No such file or directory
Try `iptables -h' or 'iptables --help' for more information.
Feb 6 16:22:54 el70 firewalld: 2024-02-06 16:22:54 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D PREROUTING -m addrtype --dst-type LOCAL -j DOCKER' failed: iptables: No chain/target/match by that name.
Feb 6 16:22:54 el70 firewalld: 2024-02-06 16:22:54 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -D OUTPUT -m addrtype --dst-type LOCAL ! --dst 127.0.0.0/8 -j DOCKER' failed: iptables: No chain/target/match by that name.
然后我尝试：
[root@el70 docker]# service iptables stop
Redirecting to /bin/systemctl stop iptables.service
Failed to stop iptables.service: Unit iptables.service not loaded.
原来这个服务不存在，因为我的环境不需要防火墙，因此，我直接执行service firewalld stop 将防火墙关闭。
再次systemctl start docker 启动正常。
---------------------------------
其他错误，修改/etc/docker/daemon.json后，重启docker失败
启动失败，错误为：Feb 6 16:37:34 el70 systemd: Starting Docker Application Container Engine...
Feb 6 16:37:34 el70 dockerd: unable to configure the Docker daemon with file /etc/docker/daemon.json: the following directives are specified both as a flag and in the configuration file: insecure-registries: (from flag: [127.0.0.1], from file: [xx.xx.xx.xx:8080])
原因：
因为修改了/etc/docker/daemon.json 内容为如下
{
"insecure-registries":["xx.xx.xx.xx:8080"]
}
而/etc/systemd/system/docker.service 中也配置了ExecStart=/usr/bin/dockerd --selinux-enabled=false --insecure-registry=xx.xx.xx.xx:8080
将ExecStart这一行修改为：
ExecStart=/usr/bin/dockerd --selinux-enabled=false
然后systemctl daemon-reload ，再次 systemctl start docker即可启动
----------
其他错误2：
Feb 6 17:12:34 el70 dockerd: time="2024-02-06T17:12:34.353598727+08:00" level=error msg="Download failed after 1 attempts: error parsing HTTP 408 response body: invalid character '<' looking for beginning of value: \"
408 Request Time-out
\\nYour browser didn't send a complete request in time.\\n解决方法：
修改配置文件 /etc/docker/daemon.json 增加
"registry-mirrors": ["http://hub-mirror.c.163.com"]
修改后的全内容为：
{
"insecure-registries":["xx.xx.xx.xx:8080"],
"registry-mirrors": ["http://hub-mirror.c.163.com"]
}
然后重启docker服务，有时候失败了要先执行一下systemctl reset-failed docker.service 清理掉失败状态。再进行systemctl start docker尝试。
参考文章：
Docker启动失败报错Failed to start Docker Application Container Engine的解决办法_docker_脚本之家