-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso 2cb558d511e9c8ef61f2d7ab8553e01cd16096cc5254906a40bbce26636f5f5f turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso $ sha512sum turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso e985f4aba43af8e235c61ce8d46a3db4ac25785282cd7f32fab5d10ae83c25375b4c7c3ae09bacb6a0a3ce62e24b5d42ed55be9250ba50342d1017df34a7fcc5 turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso.hash turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso.hash turnkey-lighttpd-php-fastcgi-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJlPIMACgkQHkh6RjHW /rZEYw//Z/kryndMWNtTJxDNmsl7Gfe28Ra3WSM3o83CzhZG5fdVTIH9fK38KDyL ixNZhl7BvrBJRFPm4MJQ2hJWoMWlIKp72tZ1nhH9ndm1kodcKjTDGrMsiSnIkxnt 657pt+vU1znHUyIA2LF0pZRHQljgY4PvfIS8i1+IfsA42j0ECGaqNtzBPtgDH2rg mT9DqLr6+eP0Qy1rLX45hl+SVs3OSYcpdQvTnAzd2TEZUCWjKQkpIMU5tvIu6Uy/ DN+cf02A6D0zZ2o8Dlll8s1C+NjP3TzhGEHrYPzAQwEYUIp7WAXxJYLfiKtQ3K7m Jc2j1VcE27bLXjH3cfphmsYGLaE9sBu+78CQBmXyS9qE8gOwdHemL3ipFdia46qJ eTOqF91J8APcLKJy4qVT7TAOurxyoNXXk5lzfhjcOyN81lcunSComI6M9fZDKIOr eJ/Trh1zKULxGhoN+nlv2APMzA0iioavelI0mhTU+ISEOSBwGmTaYNBewhBYRXlE tu5I1wlVzyVFzetIhl0mO4SerXuXj2dHCJfdydyOh1VtG5aJRSwTbw1QVgQ/E9rJ rY0PgyXCF62ypkwP+PsY99A3O9c/49ixrqgjBH9SfcSWZu5Ect5kO8jsJ+xfYSvN LXuKLFQdnolDA9bIOSg8SFz8/Dbswvpbyc7K3TR4FMajfmYtNp0= =Z88h -----END PGP SIGNATURE-----