fetch the Docker tarball, not the naked binary

This saves bandwidth.