-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz da647a5395489dbdc584a4d2d1921cca88e4f05bb543c27fdc49ef6ed8f46bb6 debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz $ sha512sum debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz c9866929dc991b1ff59b5eb3353af4ccac29713f7ab5ecd8336a8a2bc5d216ebe1e2048f1a0d3f1abbdf2a251011e57438f3a2867a2070b4d12d708a29e5b6d9 debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz.hash debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz: OK $ sha512sum -c debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz.hash debian-12-turnkey-gameserver_18.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmYx8G0ACgkQkPLGHN5q 3jfgTg/+JxJmINJGiB79JIlmA6lebx8U1LRFc/mlBCbkRLy9wz6OVQeaql+HW9hN LhtLNvIPrfnnk3sW5HTkTCYdyS+1XYNkcMKGpI6rP7BzIhtKPVIzTgG60jesM0Cg Y8wwFjAVnyaQYa86yy7zGzsLeBLbN7gdhEEEcx1DMj16gugqD7bOa6EmWUzz+aCd c4HLw9bPxO1+10X1Lh04ozZD4mqQkyGtocWzJ4Tc1DuLqy4gl3jiiZl3T1nBPj/E 0EnM464n2CdirLjGsdScbdBHWOwa2W5XZUvUK6H7WkLdkENh/TrVYRaGlpiaDpMF m9EisDdD19NDxlc7tt4tNNoKcRS5l2Hm7NJ22reMephjFQfIW5T6PtBzTJY+mIp6 yrvIvJuTTMZDO621e/84pLLTLzOdPM6rgY90qCByRcfU+fhoGsLN4CsB2xfnH7hF HT2NsUwGQO4vsQosyXfyRTwqeUh6O7q8BOw/gMlElfIi4kVsGeP8XAudmHsLnFjY w8bjn6ZlaIfnD82nLJtxfJC1IRPLv0AvmUGE/IZ0ixI35lN9CkuNtag4GOLF3UQW BU7SXoaIKM7MaQhXoWwylOWVn/a3S51/qrs2VLyM78wOru2xou5xVyGQPy04nsJs UPOeaGR7X1n1HgDdzAuH+sYPgT1FRZN0T+XINHkAwAKpNbfJGeQ= =e2bA -----END PGP SIGNATURE-----