-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-mediaserver-16.0-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-mediaserver-16.0-buster-amd64.iso 114b35c6fd7cefab02cd85f97c01e9c2dde17c9d2c21088938a3b8e270199e99 turnkey-mediaserver-16.0-buster-amd64.iso $ sha512sum turnkey-mediaserver-16.0-buster-amd64.iso 117b857e87abdf027fed6e6122528bf28c660b1ded91149b8a88e8e124222c3be2d1dc31fae47b49d65b23cfba810553d500d5e43710b41b9bbda89bce88a380 turnkey-mediaserver-16.0-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-mediaserver-16.0-buster-amd64.iso.hash turnkey-mediaserver-16.0-buster-amd64.iso: OK $ sha512sum -c turnkey-mediaserver-16.0-buster-amd64.iso.hash turnkey-mediaserver-16.0-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl+L/WYACgkQrF6wBJPl vByAPBAAk/tDM5q3wItGcXrvL27bAnhEFMps76QxYuWZzKBd4bHN/sNmsdy6NzAC GD+4v30nN5be/cq1xYYhm3XQJJiwC6acf5kNmsbgjbCvJ1mxTFmX5d7XP29LtRbW zuzdeA4RG2XKgcCV3l638u8LXDpIEe+QStkoTn6dm/KX0tJDSqLMOt5TlEaShzrH 2JiZhH+4i3hd881dB0OAtTjLbtRfkwUkwZ4dzBpouMrG13CLMVp1lmNbE8YZJrey Ay2TikXhZaJCFxmR0xCsKawPwQ2p7pO8nFNJwTseVpeFIZJGFycXMfDSI8YrDSXi 5nKdbLuRzJPyGCzDiiPA8X9hIJlGQw6fzJzSubRyAHDxOgbKaByI0TuaMz+M2JLy B3J9M1VXmR8RvY2WLK2Z95DjJq8gtF4iSZxREza8Phx/c7fQ6EZjllIk1JpISq/X DZjadnTn7k8foSk7qXvmneqKbNh84CYwacsnlHeFFCC7+wtFgDQE70dAdoKf4CXS NEnKf9z8Z972bLYl7oacqenTBu31E9ZuGV57jXZLmlrUNInN6/UJ/Um2OKEUDXwP tSSqnMsf12OXPkziq9VKOK708OgqtAWmHYeqSnNlT3K1ORreVSsjCcEHKQcjetwQ uw0fmb/IDNMJLVLa/v3IK55Ix1LUidDKEfz5QyJT2eyrQAGKbp4= =U19F -----END PGP SIGNATURE-----