-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-processmaker-16.0-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-processmaker-16.0-buster-amd64.iso 19346ccbf95e94c815c32695c1dc6d28c49442a93063d6d0947aa4b66917e930 turnkey-processmaker-16.0-buster-amd64.iso $ sha512sum turnkey-processmaker-16.0-buster-amd64.iso b0227697bf3991cc957cd4507045f35d92454b86f7ce1cc76dbea30e21af939149be7e64f10e9793523114369d410e424a38526fbbf0dcfeb15ed5caffd3da5d turnkey-processmaker-16.0-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-processmaker-16.0-buster-amd64.iso.hash turnkey-processmaker-16.0-buster-amd64.iso: OK $ sha512sum -c turnkey-processmaker-16.0-buster-amd64.iso.hash turnkey-processmaker-16.0-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7co0gACgkQrF6wBJPl vBwpCg/5AXWvYzjiUo/58KwMcQTTT+5XMTSg3tPuVQ3k4YM7e3mJASAuyfivB4xo FwITtI9er0q6cngPLPc8qx4tP5QK+ywuR8xJlz+UkbYpNFfQiEFq8SBey9MNYKLb T51UV0+KWt3Ph5NSIBlhCRLK3LfqzR3lSqvuvcYkPQYhqthZUmLz8mLnP5UiZjii 1bdQ9Wpgf4eGVP1+WSgw+hKC4DSCbJ/CiUokfpOz3xlqiPfvtEHB39dEH9PW04kr hI639aefbNqUnKc5ek8pPojOQWidoY1E04JmTdlpF6/qsB2Pj2vzS6+YksP8Hv9N Mip/W5TBUC8K6IVV2M9LWRfYqUmJj3K7xyMTQW50wLwMbcLuNses81iUKI8YdDU0 zO2eMqJ/f5LkaxuMC/Ae97gYck+D5T2c5J3TOTq6Rpv23Yt0ryUdI9lkTckHyVuC QILreI6Vz/zoAQM2pG7SiENn9Ghe8ZqkBarbCHzOwP5nIy7MvQX4bl/HKoAYl0il eQ+/F9rDSDZ6IYMMe1rCSTQhGV+v+A3Y2XTSJ/SEO4MMQ72gfBPYqpZKM0gOoVcJ my4hMG8Beq9l7Dkoe4CPnLKdyfcqiz2hkT0D7mz14/gKhGY+c9bj6AJUvmRqREAN ngL8H2F7j6q8VFZBqrmAYHc22bJmHqVFzRDvBIs0bKq9urdsTDg= =/fWu -----END PGP SIGNATURE-----