-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-silverstripe-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-silverstripe-17.1-bullseye-amd64.iso 0e72bce62c21029f0691502925c7ae7bd4d70c539dfb83bdf54a41048edb3f6b turnkey-silverstripe-17.1-bullseye-amd64.iso $ sha512sum turnkey-silverstripe-17.1-bullseye-amd64.iso 8f8f8211e9bfd2008387bab47c41250b118cb0b02ea0b83c738058bc500d7ca407fc23c5b23cdbb93244987778518cd2c2d50a2b7b82de6400a7c1947970c2a0 turnkey-silverstripe-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-silverstripe-17.1-bullseye-amd64.iso.hash turnkey-silverstripe-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-silverstripe-17.1-bullseye-amd64.iso.hash turnkey-silverstripe-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/QACgkQHkh6RjHW /rZxJw//a0CffOn8GDP5ooYgAywzybIhWDoh46OlFlsH2RsUjAiOdB582koNpd+3 CBGYSp9mdLRKrErRC56reIe3jD6QvfIlft1lqaQotOVBAiwZxGQXJOc4NaDSRP6d UlZ8BbS1koox6tADszl03kwXA5zER21mWenV+bH+DtxEFSF9DOxU0i3B7Adwyf0K S+e7AoImmVfVv3vc4Oh3cg3zHd1eOlKGqlhXPHFAwpdzjwvqPt0s3nj1KvvaEIAI 97nVldfSr9epPem0xbVR3b0xJmWgEqPW1MszaIQjhmnVVHzYQyU0AeQZkxhGBvlO 3mnouTmo2V45+W6jMWG/w1FYOyIJXMwLSu/RIw2ErnLrhgv4VNwHLW3PFxxBd8vf dQrhcMTIr/M5t0j3V3CVy9YYl5Eo4zZ8zPpIqkqhYGKHyjMpjj7IuhAgzVGV/Zwv Aob5QwSijDRvDnZDujwLYtiFOH2621qg1Xt+JfnqNJuYBqkNFZVQxpZ+49rfVx/f dyj8jRmqI+1jO4Vmp0Vk4ziaQ6abyEMoCCns6fW0Fth1jAv95vN8nUdp4RTumu61 wMh3A3UoW3PbPJrjXMBiekkKrLHzUcKlSw9D+ZQbdIObJslDlX3/bREnGFvUf8re UpORyFuPStDQ1Mnv+P0OkOvXyxqWazEBGKvd0sq3SkDIbUA2mBU= =9d1p -----END PGP SIGNATURE-----