fix: update restart label should call after task is started

Author: ningmingxiao

pkg/containerutil/containerutil.go

@@ -257,16 +257,6 @@ func Start(ctx context.Context, container containerd.Container, isAttach bool, i
 		return nil
 	}
 
-	_, restartPolicyExist := lab[restart.PolicyLabel]
-	if restartPolicyExist {
-		if err := UpdateStatusLabel(ctx, container, containerd.Running); err != nil {
-			return err
-		}
-	}
-
-	if err := UpdateExplicitlyStoppedLabel(ctx, container, false); err != nil {
-		return err
-	}
 	if oldTask, err := container.Task(ctx, nil); err == nil {
 		if _, err := oldTask.Delete(ctx); err != nil {
 			log.G(ctx).WithError(err).Debug("failed to delete old task")
@@ -302,6 +292,17 @@ func Start(ctx context.Context, container containerd.Container, isAttach bool, i
 		return err
 	}
 
+	// restart label should call after task is started.
+	_, restartPolicyExist := lab[restart.PolicyLabel]
+	if restartPolicyExist {
+		if err := UpdateStatusLabel(ctx, container, containerd.Running); err != nil {
+			return err
+		}
+	}
+	if err := UpdateExplicitlyStoppedLabel(ctx, container, false); err != nil {
+		return err
+	}
+
 	// If container has health checks configured, create and start systemd timer/service files.
 	if err := healthcheck.CreateTimer(ctx, container, cfg, nerdctlCmd, nerdctlArgs); err != nil {
 		return fmt.Errorf("failed to create healthcheck timer: %w", err)