[burke]

One alternative would be a graphical installer that asks for your root password. It would very likely also be served over unencrypted HTTP. This happens all the time, and HN never calls anyone out on it.

How is this different, other than a graphical installer being completely unauditable, whereas curl|sh is quite trivially auditable? Both run code as root.

[zobzu]

Put your packages in signed repositories and start serving over https. Then people can even do apt-get install docker. yay.

[jpetazzo]

Actually, this: https://launchpad.net/~dotcloud/+archive/lxc-docker