-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-orangehrm-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-orangehrm-17.1-bullseye-amd64.iso 69246f06247abd82c9aa837a83c0fe568af9609b857fdbc56a8a5871c208661b turnkey-orangehrm-17.1-bullseye-amd64.iso $ sha512sum turnkey-orangehrm-17.1-bullseye-amd64.iso 9644dcdb5c95293b595daf503f70b90a417ba07182ed3277fcef405ccfe3f1e2ccd5229e7ff06e734ab0d990df147dc89538dc33fd39d8fea3ee47340cece863 turnkey-orangehrm-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-orangehrm-17.1-bullseye-amd64.iso.hash turnkey-orangehrm-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-orangehrm-17.1-bullseye-amd64.iso.hash turnkey-orangehrm-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/MACgkQHkh6RjHW /raFiBAAhlseMhJeS/MX0Va4ADgnwIHK8XSxL7LMzR1bkiCJ95Mp+9BQMMcXhUN4 eidnrMdflem4l2lH7xQJxKMxBZGI1Et3+SY9Cyv0fLMSU3EmLJoSw5bVW5hhutSK jXuWlCCjgAi1kW2PegMeqoglAMkgxsVlLhGUXClIzpjuCtr9bok2JlkqlmUOHOI6 pVvwu4iN4WiD75xFmaKAN1eUfPp/jdY64m0r8kWAjbE7zMuX4kV3c7U1DpgOdlNo Czxo9HeAw/SBfOR2SMw+KeFfny4uaPX4h4W7K4/Nx6VHzKv1AL0h/4KLY+/riIs3 k2OaaFCF13UyBzEefyh3uz81mIxOiAlMYoRUqKhfpwLxUbUYjGBYxJvlOQiwcsQv +rKRjKOH7m9UtYc8vAixlzbzfo8S764/2wCPo7IXgj0BTrDOBWnogOiN+NJzN56F I7eHBnMrWGnBmkGY3v1lfRv8k+IzQfyU4NcQ5Kun4JKfDj9dSglpKIMxEPvcXnyn 1Fk9lQZR9QDNsokcog16DdN59ZJlWIZ2yG7GgISPCb/sXEHEMKGfCnLxszwOOMkT EVKbja55IGIWLvlB1oNRPwIoQVYONSDzfOkQrjk6R7UvFiDi05JZ2zDxAaaxYl+O 0iFiJuTnbCaVWbRHGXvWIi//UxwtetkyCFHeywmZtn/uDaeFoAQ= =Fp/q -----END PGP SIGNATURE-----