-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-omeka-16.0-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-omeka-16.0-buster-amd64-vmdk.zip 0131cd2f7db9a5601e9bfecd0d11214ebfd21bbf20067b7b7e5573755d2c4f79 turnkey-omeka-16.0-buster-amd64-vmdk.zip $ sha512sum turnkey-omeka-16.0-buster-amd64-vmdk.zip 2f1cf05614e148cad617f3d50c793f94af331125a48ee827eb31b908a09fe3f86878272b2568203373dac76f193afdcf351ab14790458fd19dec42f3aec06316 turnkey-omeka-16.0-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-omeka-16.0-buster-amd64-vmdk.zip.hash turnkey-omeka-16.0-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-omeka-16.0-buster-amd64-vmdk.zip.hash turnkey-omeka-16.0-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7vE5kACgkQrF6wBJPl vBwGJg//XaDp71ws5/f5zoT9NjtvuVsFXQlEJsr3JWTvfgRClJttQQsQdv4IL053 qS6K0nHARwJG5muzN+pJgpEv3ce+ShfApRvpA5IKHDZr2TpAbZ59Kt8ArwcAMNa9 mpL9m7Qz50ifcDRnCwANU6UdqEnuF0DxxBZyR2si5PVC1CUr4Jr9fAx9xXa90/ZE 3SsM2nn1Kq+vgd4Dpxzd9ihZdipbTa537STWhLESHs35uYT4LBaywb9TjbEiCLsd +2NaiSVVEQ8zEDu3NlJ2aqp8Zxa8boWztgECq3TNOb/PgnArYOejaARPk1GzrkeS mCS22MvH1iXQv0jqkO8BAG0ULZegG9T3b4nsCAv/AxFBjTvI6u1BAHz+OPqKlCe5 L+6CA5IXinNrZD4zu9o4veQvZtec8Zqj7n+NDcOmSEcT9BKoYZu5AxfwiuGgKd5x ckPfTEhkTPSRFTXsyym0RJh4lD3VNcf3DtASgdfMIjpjsdfEl3Ixlh6IqaDsFnVp +4Y5ab6v3uq4cTszbY/VjphEKaROciN3o1xVs80xie02SeQr8jTlz9v2McF13T25 GqOgrbkbloqotSe0JXg7FwVhfzIFVsgF0xD0fug2uTb1X5y1LfqBjCQtLEACoMOm wdWIRp900dBjMzBBaIKkCmfmhAUgLfzem5vS2rhL4qFOiXPy63E= =5QEY -----END PGP SIGNATURE-----