-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-omeka-16.1-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-omeka-16.1-buster-amd64.iso fda0a3021b072c7193ca1d4bc3c711d63edeb5c90dce718a4efb6b728b231b1f turnkey-omeka-16.1-buster-amd64.iso $ sha512sum turnkey-omeka-16.1-buster-amd64.iso d1edd98a940ea77ccd59177bd56cc6b4c03bdc6c0f39dc79a145d699b21617f444317cfad5282d211be3261829a4766e9f740a3d111cbbaa55240e5d4f7dd3d6 turnkey-omeka-16.1-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-omeka-16.1-buster-amd64.iso.hash turnkey-omeka-16.1-buster-amd64.iso: OK $ sha512sum -c turnkey-omeka-16.1-buster-amd64.iso.hash turnkey-omeka-16.1-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmBh2NwACgkQrF6wBJPl vByTrw//S0+xN2FbTwAK9u1anwflLbrv+wlTswYsk6LTUdy/8YHdl1RG7oOiAMqO Xkpi2pgUYhYWr/2d40f0chh5uX4kvL9ifUEd1nqthm0PRPxptBDpWCaZhL98JqaL tN0mnBJ9LWL5vK9wsXSJYgHITUKqbTeW6KJ4ERZn0PjHqdGnxg7H73pTDwLtCMNi BCwcEewl3IfHUDm+6dp5WRdMaBgcR2iiaDRRpV/7zB61MwpZi9Fl5l0tJU8cickp MwPx171ebUc70lTb6MHtJyIRTk1QkQMh/5cEHFyZSzNV/eImstdJqMT2uMR5YGBS bBSk+8A6ILTf8LjyvDMDOarhKoNq5Fa67aETKvFr/EGHdeaDNKiQBalRjtP0IPIF xzTpQ2cDvvh13zC37RY6W/VIpb0aY4/V9CdyKSOvF3Xv+XgmKRowYwvUoK4CffbF r5nBKjpvg9btJIbEkQKVKxCLcSjqdk3YGlYXz5gxaMVQg3URBmIxrXkgOyY6GhZ5 h2hlr49t6qFTJfUt0cPuR9PzgKUvy3EjHiv92ObF6HDbT431qZicT6/SLxeEUoo1 naE25tsS1tTYy/pDypw/QcKbNyGnUGEGKV/EFDCE7zCWpdFd3WNhID8ccxNehs8o md9HeBSH11hc8WBW7DnNutPy3g4lSN23atM8L1cCDoSponqKeOM= =pRl+ -----END PGP SIGNATURE-----