What is docker‘s official GPG key

• 问题描述

  安装docker过程中需要add Docker’s official GPG key.

  curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
  

• Why do we need

  This is not Docker-specific. Most Linux package managers have the ability to validate the itegrity of a software package before installation by verifying it’s PGP(GPG) key.

  Most modern Linux distributions come with a set of PGP keys installed for the default repositories for that distribution. As Docker updates their packages at different frequencies than the distibutions, they have chosen to run their own package repositories for major distributions. When you’re configuring your system to install packages from one of those repositories, you have to add the public key so you can validate the image.

  This is not something that has to be done - RedHat’s yum has --nogpgcheck, and Debian’s dpk