-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-roundup-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-roundup-17.1-bullseye-amd64.iso fd9b3138ca15e38255f15c759d61577990167585f6b429e3f00eec17883656fb turnkey-roundup-17.1-bullseye-amd64.iso $ sha512sum turnkey-roundup-17.1-bullseye-amd64.iso 247ee12600cfec212387528db15226d9aa4271076a3e8c1b1e2c95c90539edb10a3d9493439685ed3998cb1f06005ef14906811ef2e10d1d9e12af35f524c746 turnkey-roundup-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-roundup-17.1-bullseye-amd64.iso.hash turnkey-roundup-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-roundup-17.1-bullseye-amd64.iso.hash turnkey-roundup-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/QACgkQHkh6RjHW /rYyTBAAglP8+AgVobjlficDc+sTBZxoqvqf2ojb674XUgKshGU2lw28w0k5dw4z rGIoqfEWE1rDfjIrqe41MM5RRePmAxgbruC5Xuc/9IWFN0j0buV8lJwtzYpsirzA eO7ZPmadb1LhDB6Xa1YwzkP8RfF0npXlIjWMnKizCMfvfF2PIEpW0+gxk4FPEEJc LXYSrhLc4ZTkEuZKhQk2s2Y24HtDpdA9Bl93TEDNfYYLFguboIyLgM6ZvNlfMVVv PK8C2eBkT1JTjSlbcp+yBh0d/BO7U8QCANEUVD6zoTaxt6ubbQovlg8fvqYVmCuc AddbjtZW3AeqfMj4S9oB9t42G0QpoI8fYcsf62mr4qJ00qm6igp993RFEMRw5TYa EWGmd6nqLvc9qhDrY77dRfDBFeHJpaJbvGEWmY6CKF1oeVWFHRDl1dkWcqfOd9rp 98kKMb8zax9e1CvboeUzqp6mykqNux321qc7ooK+GsFWMMP4Hd+nzd4cqGK5bPjs Hye+2rr+ToAbrLkoLMSd0ykzTcXowtNfpqwRANTDPkHvAYHUar+74VbD6vwWv4Hr WJONVBt6gqJ10fYCacKezYOF5S8Qwh/Owr4tam5jNUxHNRk++Cw/1DvZRlLC2qvI EPtO/g3NsVWiR1e3ZVrZfyTQBILFK16x+uEY+bVgACh/tGUhGDQ= =w3qa -----END PGP SIGNATURE-----