-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-ghost-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-ghost-17.1-bullseye-amd64.iso bdbd139b50775eeb3b6f814a400f3674a4730a7f7f51f6a17ded2bb52d5ddb96 turnkey-ghost-17.1-bullseye-amd64.iso $ sha512sum turnkey-ghost-17.1-bullseye-amd64.iso 8db59a39bfc74f800087009e9aab0a2cced03809513ccf5fd7d40b1cdc893ffdebb207aa8b3734c33785ab9ade60027cd25d241527e6483d2b2b649b151d1107 turnkey-ghost-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-ghost-17.1-bullseye-amd64.iso.hash turnkey-ghost-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-ghost-17.1-bullseye-amd64.iso.hash turnkey-ghost-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/EACgkQHkh6RjHW /rbi/RAAjYul35KJwebf/s4q55o0rYEa6njlLqFfhY5UMo/6U6RvJMDqvjbH+GWc DVZm5ZAgAfKmGOa/sF5SWtyQFIsaMC+O9SKtz+yBfYpNm3LYA7mEorvwYyq3XHmr cDF5Rnx0ZZMGRip+S/b597WMm+orDTO6PRan52H7KvZpbXSWrRPydcWyUnYgKw7T rXWWo6iM/5NWlL9QysEIZqZZzrmYhTSmtsSTgTgAESNlL/Dfy/GWoMpH0uTghtI+ JK9WI2yr/BrXUN3Fnf15ZbFNSZiPIqk98FknZEmDuW9byynrbs8HmxaDtq8Gqau5 4zLJvAWr6uPegVr/m6M/mJbJgvOyyRmFisDi8q9lcAiwvezMX4kWEGekvGKkDRgO O9sBoDs8WvOOAbAO5TE8DG8fBWKrE68F5ZISLlz6WJCYXEFfDKy00r3urbRJV9b0 N4JjbRl129gqKkl3vYLEQB6214rl8zWMG2PTK4Lm5sHvyC9J4bzICFmFEB675vYL NPXBvLaPSP89f6oFelZnes2Uk7whebvoQih+eUplOKBghx9JisyOqvT5hHn/1OtB uACnXntULBUbyEc+8DwYe5vSP4lsVK6amURQr7uqbGdGB5oH52zm4urCMESlbUax KnvFS8uxqigQGB2zU6tlgTUBbpITl0o2LAmEJ4CABkiE4sK4pWY= =9n80 -----END PGP SIGNATURE-----