-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-core-17.0rc1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-core-17.0rc1-bullseye-amd64.iso 76760c8cc1f49c518e62f2d8157cb68b26be3c4dd12cd631c826510c038ce2c9 turnkey-core-17.0rc1-bullseye-amd64.iso $ sha512sum turnkey-core-17.0rc1-bullseye-amd64.iso ff0219fd8238f71ebdc019dca18eba9b476b8033348728b195b1ae43b8c9d58794f81fbb04142ae947df3b1bf970b37fec2eb75571056348eed5da25d27341b1 turnkey-core-17.0rc1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-core-17.0rc1-bullseye-amd64.iso.hash turnkey-core-17.0rc1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-core-17.0rc1-bullseye-amd64.iso.hash turnkey-core-17.0rc1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmGvL9UACgkQHkh6RjHW /rZV8xAAgMSKfbvUsW9WpsT0nrSPjwx2FbUJtN7xRayhwSvEpU6UunD12cAVsl47 ZGz98+qfSL4s3L9RCR6To6cLIan+36hr2Lc+eeHKXTDjJfANUvuB7BPcKw6JcHs8 /0TDG/fue3geeB+rAugmOkLbhX8BiKUUq1kRZGcDHzDlqXRVzgk8V6H1nsdhvLTU pDrN6yk8B10m7t8pu7H0bSiJ1yYqIoct/JttfDoo9Rucyr2FFMQ5zFg2/BKIC6P1 ZgAZkXayddoIhkHT1fA1kKZHgLfc/9j4mK1DvO7la6Mro3jYOkjNL29u9DTzEqoQ 6wOB9Ap+e/hOEJc6oP3Dgw8ZUUnN58cgF0rQl1D6gXV0sd8cqrGvQ+sXFWbOXxZm uoQqsyxolKQ2w7DeVuxEun5yyzVGNcePT+cI2AvOrq7SywnmjNg8npijPQrFgd6B 3DXnqdN4FCUgLIPyeRATuj7Pyf3uOouO93uoQzHHreEeRSyDEk4soba/qN2kudVp VtyGHwELf4PECm9rEUFlNAvT6OqPAbo2HPhai1/VrgfgoOjhdYBDuyHPORV24TuV l756YQsnTTywb/7i+NH7ocygVbEEhqFydPjZTWtBrzCH/cECR5CkcWEZteavw9RO 6AAQkwjrBv+5OH/KBEubnEKA0iMt9xYTZ+qfAUSrMeoFkGuHgN8= =W7iY -----END PGP SIGNATURE-----