A self-hosted runner picks up jobs and every Docker build fails

After a host patch cycle, only one runner pool cannot build containers even though Docker itself starts normally for the service account.