3 ms·
I always install docker using simple command curl -fsSL get.docker.com | sh Instead of copy pasting dozen of commands from docs / SO
by tandav 7y ago
I always install docker using simple command
curl -fsSL get.docker.com | sh
Instead of copy pasting dozen of commands from docs / SO
- heinrich5991 7y agoThat looks vulnerable to MITM since it doesn't use HTTPS. Indeed, I just looked it up, it's not in the HSTS preload lists of any browser: https://www.ssllabs.com/ssltest/analyze.html?d=get.docker.com&s=2600%3a9000%3a21c4%3a200%3a10%3aa463%3a3d00%3a93a1&latest https://www.ssllabs.com/ssltest/analyze.html?d=get.docker.co....
- tln 7y agoFWIW docker doesn't publicize those instructions, they give: curl -fsSL https://get.docker.com -o get-docker.sh sh get-docker.sh And, it's the only one of the examples listed in the article that doesn't pipe to shell.