-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-zoneminder-16.1-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-zoneminder-16.1-buster-amd64.iso c669c3c199232ce3348e2c7b3a62cbf45a4c6ef8244fbb5c2cce24e3ba7209ea turnkey-zoneminder-16.1-buster-amd64.iso $ sha512sum turnkey-zoneminder-16.1-buster-amd64.iso 88a6649a4b49bcfdf6825afde318ae97e3d1263d9a2812966c33e53b5826495655f720e5bc3dfafc5ead9152d4cf975ca23db78597dda2d12d0a17d88d09b7ed turnkey-zoneminder-16.1-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-zoneminder-16.1-buster-amd64.iso.hash turnkey-zoneminder-16.1-buster-amd64.iso: OK $ sha512sum -c turnkey-zoneminder-16.1-buster-amd64.iso.hash turnkey-zoneminder-16.1-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmB729YACgkQrF6wBJPl vBxX+g//SnxwRFO1eXHGpIXyNwI7H/U3y+KC7t0v15vO8SoJ8OfM15lwEQowfFU+ XVZMi9JdTpBY3MIGA1uB2b6xTrlfZ9/Os3AV2AWaDVrk5fqqSzNbq91ll3vdenAm lR/x+bRFjr8siDCCWLOl7Y/lTeYynN6FlceAbDq1/1FfuB6M8vshq3dU2ppDnrO7 aQUexj+NOanCxE/9uOpwWeBFcy0taQGcvFrXuR3rpAN1Ogc+gZcCpSG/1t9VRUWn YdZU1riTqoEn0NjqVyGqRLp3IK6tPaD4pI8pOvBQ8jUcfvuf3wb+Vl+meSYPa6dJ FLfI5RyUOq4IV8NHdYVoNr0l7Jw9sgMkVg1HXV08nc8tsJ9n1AXoEw+5ooqk/Ckg MVknud7ThO4kaKIE2uGEmP9invOpBMR8g9IBU4DREZPrUs0HQjgZzUL1hFqzk37W manrbC4jTvbBSHyx7H2LDGCbD8f0XTytwOJjsF5tR7zbvlNl6ELvCr9N9WNY+gBr 8eQQ616V+7qMdo+pU2nu15oKUkXUWjPLUDG4Beb9uDRaQ9P5ougUQNJjTbkHrsJj 3D/AEpIe6C0sADst7YaHm83UpryHP069xyRPmc1pzKSUTBbSsIYoZb6s7HpDkJ// PE6DlNVigUDCu3tl9fn7FQblDPjKQjQz1YllqrezvC/6EL9Va2M= =GSrs -----END PGP SIGNATURE-----