-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip 673db290eed3ceb074968a188b550b0a0997a9d37db3e412da5e999e00f01c26 turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip $ sha512sum turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip b3399e47feb98d9b556de906883dc2de29cf7ba2e9641e74b2bedf6aac5537e0601871b0128d18a75467e0d180ae42c8ba0c45c6b035cb91fac63b8907c19475 turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip.hash turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip.hash turnkey-dokuwiki-16.0-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7vE5QACgkQrF6wBJPl vBxyAQ//QPgSewwSG09hHXiRpO/oDGHsZ66J6wvOdxYud1QARfD5n9qvwGO0mKGx REUkCNMKocZv1cF7ICD2by0e9tPbR8KefxjLelHAy/85GYKhsM6prg3nHOa7BGed CAynwu6Qj3tM9N6fYd+8LLTDXxCjvrPuw8ajrM8DCdxOQqWfEs2jPjku1RBDyv57 BoZDRqjCkTIIMS0saDf9adiuIdwF21OmAyC9v2SWhbR0ukmT+ReZgZ78lVU8LUi/ e8VBDsLBLpoEefIORlsgLWoHHuUoiU/4t+YQ8zyyvz+lNeuts8LaoM+MhVyYWHJV eq0bhcg1AZsEiSykMsDtvYWWk6JS5KqBIQaQFPIzs82PNtBg+rFvQuVL/jfD6APs c0OBAtzuFaPJjI31O0/LlWRPOxK+vWMsYQrfBYelR02NJJnI70Ed2AtKklJ0f7R5 lP71uqScZM3khagFlxplA/WNBugMkYMxl/VF1deYnC+29054uDtu4+T82//a4/SX VZDMWK/8fhb6DaLbB+dhJUp21GAl2a5zwohbdwtf7iVph/tNv222jH68P5p5rFxj /Txxt0FgdgKgkqhJb3VElIcbw2INceXo5qrPL7V0kVquge/g4jg4cfveZZdSTtyy Dq8UaYuy8QCWEGWis1aTQMSTas4zG/F87GKG0cT41MyR/RVTe0g= =oUct -----END PGP SIGNATURE-----