diff --git a/tasks/main.yml b/tasks/main.yml
index 0d59f89..8dfb603 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -18,10 +18,14 @@
 - name: download keyring
   ansible.builtin.get_url:
     url: https://download.docker.com/linux/debian/gpg
-    dest: /etc/apt/keyrings/docker.gpg
-    mode: a+r
+    dest: /tmp/docker.gpg
 
-- name: download keyring
+- name: convert keyring
+  changed_when: false
+  ansible.builtin.shell:
+    cmd: cat /tmp/docker.gpg | gpg --dearmor --yes -o /etc/apt/keyrings/docker.gpg
+
+- name: add repository
   ansible.builtin.apt_repository:
     repo: deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian bookworm stable
     state: present
@@ -38,3 +42,4 @@
       - docker-compose-plugin
       - docker-ce-rootless-extras
       - docker-buildx-plugin
+