-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-odoo-16.1-buster-amd64.ova.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-odoo-16.1-buster-amd64.ova 33c3a02bd2c2381a74ee2cec8b4c1bc0fd5912a4d0010db6495ddc092ea9bc9c turnkey-odoo-16.1-buster-amd64.ova $ sha512sum turnkey-odoo-16.1-buster-amd64.ova a36f69971630804a489ed756ecfbc021d77f87662724b5023e690828b83a643936723f9a81d045982caf885a485e6a1e0641cbe20e16dd07659eb51f9394d6d5 turnkey-odoo-16.1-buster-amd64.ova Note, you can compare hashes automatically:: $ sha256sum -c turnkey-odoo-16.1-buster-amd64.ova.hash turnkey-odoo-16.1-buster-amd64.ova: OK $ sha512sum -c turnkey-odoo-16.1-buster-amd64.ova.hash turnkey-odoo-16.1-buster-amd64.ova: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmB729AACgkQrF6wBJPl vBwdlBAAj4ItPqF0UdF/ztDb/bwpeo36WyHxoLpke3PRGnwjIZ7diQtNJmfm0Vzn /usB63G/ySb5Tr+JXi9qkXUNyV7gKFRL8EuHzVyUQC7VwOnJF1V3nLTIuJhCJEM0 +neQyA2qGoVjA9jIOXWeEKNDC+XtMMh254LImq0A57mrXo/yUgh/CofyOkki6jpm o3Bcngb89gr3W++abm0DKp81LdHBebPAl9OY1gWLZC80KWC+yC+pzlkWTIj4rD5R Q27apsAmeT6TKLY8fRnXAlqdUQ+PxUKWqbkFWl4b1zMWIln9/jJ9q11PpuQda/nk YiXcyvpTHlfMVTBXre9EpuoiNyVZ5/cHo0YKR09cHVuBfEH0HIXO3S28IzfK1yeb sfpUbqW/bFT91HprIQAVAexq5pnuckcfANtpY8m2Yzabj8oDYGmD/PQFH9z548SV cB2ak3ET0X2W79bZ5T8ZAD9Su2kuW3Qhwzqfxa5Rs2kNeQoR0aYMXwi/li0mE9+d dGLP9HSLjmW2cv/yurfEJewRvjC1ZVqjnUDRFfUxau9CWqIg2/cYPovh3mrgsN10 L9mnqrQ4HGi5eBB06+gVlcnU+4j2TzKsgvLynOX509GWahWoWHxpKHl0g4J9eNON 0FGfDPUCqyiPMtv4LhTlcFRytMmQi9akJ+BCuoYod3e3EfLohdg= =IBns -----END PGP SIGNATURE-----