-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import $ gpg --list-keys --with-fingerprint release@turnkeylinux.com pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D uid Turnkey Linux Release Key $ gpg --verify turnkey-domain-controller-14.2-jessie-amd64.iso.hash gpg: Signature made using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key " For extra credit you can validate the key's authenticity at: https://keybase.io/turnkeylinux 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-domain-controller-14.2-jessie-amd64.iso d3b621a05e5cb43d9fa51873f5397b38ae4e6e02eb0a0d3f8211f6511edb5a4d turnkey-domain-controller-14.2-jessie-amd64.iso $ sha512sum turnkey-domain-controller-14.2-jessie-amd64.iso 9bb7abdb5c51b43fbd0df6f43fcb15c5d959081b339e77d87a8b44d7cef53c7b891865083744f273172bf78b3aed8c13e481f33f544ffc940473fa03748104ed turnkey-domain-controller-14.2-jessie-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-domain-controller-14.2-jessie-amd64.iso.hash turnkey-domain-controller-14.2-jessie-amd64.iso: OK $ sha512sum -c turnkey-domain-controller-14.2-jessie-amd64.iso.hash turnkey-domain-controller-14.2-jessie-amd64.iso: OK -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJZeIKkAAoJEIXCXpWhbrlNtCcH/Rg/MX3eMIWJTFrdF6y5MdHg rZOGaEtDpL2Ilc+I4VhJFQA29lUSVyiMrwXPVohSpzqBUfO1om74l7HqpH/VQ9/H 89ItQXQB4dTqnubxA5f6Qca8gdtZGKxvQB+/Rc4MK+NLg1twn9xnS5HecpXUJsbH TZvIXFzPt8iqf2G25mV0Atj5EF/qNrH5VihtZJrbaymo9I1QeW2qQpatSjumPb2b E/9uCrrbxwKMfxO3EzX0Pm7AET/+vNyWSAQSoOVi9ElmZ5QFRP8O2w35SrnJX0to wgx32p0vF7Ix4mYB1yv4NsZbeA+sWWx0uORqojbjVieCcriw0dkp0M3ach3+7YI= =OAwq -----END PGP SIGNATURE-----