Ensure containerd service unmasking (#8726)

* Force containerd service unmasking

Force systemd to unmask and start service when adding containerd service

* Eliminate restart and move unmasking step

Switch to start instead of restart
Move unmasking to restart handler

* Add unmasking to similar container runtimes

* Add missing service names

roles/container-engine/containerd/handlers/main.yml

@@ -11,6 +11,7 @@
     state: restarted
     enabled: yes
     daemon-reload: yes
+    masked: no
 
 - name: Containerd | wait for containerd
   command: "{{ containerd_bin_dir }}/ctr images ls -q"

roles/container-engine/containerd/tasks/main.yml

@@ -98,7 +98,8 @@
   meta: flush_handlers
 
 - name: containerd | Ensure containerd is started and enabled
-  service:
+  systemd:
     name: containerd
+    daemon_reload: yes
     enabled: yes
     state: started

roles/container-engine/cri-dockerd/handlers/main.yml

@@ -8,7 +8,9 @@
 
 - name: cri-dockerd | reload systemd
   systemd:
+    name: cri-dockerd
     daemon_reload: true
+    masked: no
 
 - name: cri-dockerd | reload cri-dockerd.socket
   service:

roles/container-engine/docker/handlers/main.yml

@@ -9,7 +9,9 @@
 
 - name: Docker | reload systemd
   systemd:
+    name: docker
     daemon_reload: true
+    masked: no
 
 - name: Docker | reload docker.socket
   service: