-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-elgg-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-elgg-17.1-bullseye-amd64.iso 2c302b85f065592118b7739306ee1a55b59e59a59c3436f85c42f21ee67f5c9d turnkey-elgg-17.1-bullseye-amd64.iso $ sha512sum turnkey-elgg-17.1-bullseye-amd64.iso 93c9e4cfc2d44f5d6190bc63a70849ac1e6ad2580508431f2d17b6dab8d4d62ca1ea3ec804968890aec8cdb596d27e724e6e440aed4596f7616d3c8bf1c3eb0a turnkey-elgg-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-elgg-17.1-bullseye-amd64.iso.hash turnkey-elgg-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-elgg-17.1-bullseye-amd64.iso.hash turnkey-elgg-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/AACgkQHkh6RjHW /rantBAAkFUBQ6NzjtLZrREZxnfcztYuR2JXf7ArYr4uuOYzBx2qZoACP19JpzsR tOqZUS6/A5rDviDy4qF6hBZPGx3cMSgG8DU0mPCPDc+kPTQo/HVwu2YQz1ZKlL0X FayOXITgcmyCwU0/zm9AMB3vG/N92ndpSZ+gMs3uMiVJFFn7fa2u5dT1JPDEtQ4H Ro4fSIbERsXNKM9ekQKF8X9CmbVekwuPDnLMSbGva1mmaSVpadKfxxlfiFPt6IiN 9GdtxfJlND6XcPWJz+8y3gIJBrAliM1maa/XA0fCIS7aUpmnUu3XzZTVgfzrbVRk WuR10Y7LdySZmruzeB6fYm7qq+wR7LD0p8l5R0a2hVbJaXgcXwuv1CK56WU4QoeJ og+P7jSzH+NpXi59BSjo85wUqT58ePsbQdmNlrRbx3FqlRhypcQ9PQFKyZGJKjfA BRQpmKtNksOxUiAOojEOtS8IJesKcMoEWBH5zOopZSZkeNCodoUA+JIhHSUSIcA+ kOLeUzMRiFIXPbAie9UIKPouDByA8UNHVMDae1+iDONAz6j64nRSuJA3GW2/tWCg LkCa7QBKsqptEVJTVeFHTMMbSKtTtqKqvekHOFNWIVc8vrrkW+F9Z0A5Sy8iKRg0 AXZ/zZOmeg3pcfPqlaD9SQQ17rlRsnf1tGpX8lgjRqm8Lzy6x+w= =OQrK -----END PGP SIGNATURE-----