docker.socket : Failed with result 'service-start-limit-hit' after protecting docker daemon socket

Question

我遵循了文档 here 中提供的步骤为 docker api 添加 tls 安全性。证书位于 ~/.docker/以及 /etc/docker/ssl/文件夹。我加了 覆盖.conf 至 /etc/systemd/system/docker.service.d/有内容

[Service]
ExecStart=
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2376 --tlsverify --tlscacert=ca.pem --tlscert=server-cert.pem --tlskey=server-key.pem

然后，我使用了 daemon-reload 和 docker start

$ systemctl daemon-reload
$ service docker start

中的错误journalctl -xe 是:

-- Unit docker.socket has finished starting up.
-- 
-- The start-up result is RESULT.
Jan 15 21:43:24 cynicalplyaground systemd[1]: docker.service: Start request repeated too quickly.
Jan 15 21:43:24 cynicalplyaground systemd[1]: docker.service: Failed with result 'exit-code'.
Jan 15 21:43:24 cynicalplyaground systemd[1]: Failed to start Docker Application Container Engine.
-- Subject: Unit docker.service has failed
-- Defined-By: systemd
-- Support: http://www.ubuntu.com/support
-- 
-- Unit docker.service has failed.
-- 
-- The result is RESULT.
Jan 15 21:43:24 cynicalplyaground systemd[1]: docker.socket: Failed with result 'service-start-limit-hit'.
Jan 15 21:45:01 cynicalplyaground CRON[12768]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 15 21:45:01 cynicalplyaground CRON[12769]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)
Jan 15 21:45:01 cynicalplyaground CRON[12768]: pam_unix(cron:session): session closed for user root

我该如何解决这个问题？

Answer 1

在本案例中，在最新的 manjaro 更新 (2020-01-20) 之后发生了同样的错误。
尝试按照建议更改 systemd docker 服务 in other cases ，但我恢复了这些更改，最后这是 用 解决了:

重新启动系统

(就像这里的建议: https://www.reddit.com/r/archlinux/comments/7ya4ug/installing_docker_on_arch_linux/)