-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-gameserver-16.0-buster-amd64.ova.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-gameserver-16.0-buster-amd64.ova fce0e1f0373e6fd3e868dc460c4162811ee89ae05287da9c26b300ce50e53bd4 turnkey-gameserver-16.0-buster-amd64.ova $ sha512sum turnkey-gameserver-16.0-buster-amd64.ova 4f1c64015190b4d5a7c68ae993af981ae47d75a4f8a9ac36ca9f138268cadc01a56d62d7688af1d69215f8f7eee3c131fa2163b332a4f704f67149d671989268 turnkey-gameserver-16.0-buster-amd64.ova Note, you can compare hashes automatically:: $ sha256sum -c turnkey-gameserver-16.0-buster-amd64.ova.hash turnkey-gameserver-16.0-buster-amd64.ova: OK $ sha512sum -c turnkey-gameserver-16.0-buster-amd64.ova.hash turnkey-gameserver-16.0-buster-amd64.ova: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl/YwacACgkQrF6wBJPl vByfww/5AUxAxiXDZQKefBGFYh9ppavBfVb95LVFMhD8dRJk1+9d4Pj9YPA3gJnv /umCMwn0KuPcVOpMyRoL7aE24bB6XHEfMdOvZLOs4J0SemnwCykQRjjDm9WDbryO csCLhqOZgLDfQWxWVwVBjVTdOP4RkujRTtArKJcSe7cR1lYagxYrAVxVMvok/HpD BF4rPLPPZ+ITZn6ete4gXcdgksPsvHe6fd8w1gYwfUB83GAj79w6OKIpMNfJXrUh UGNMw+ZTyoHvF1DllqsynfZxRAOdm+d57Jwn6GRt2y6wIfFj0jTLaK1+vF0t6t8U +vLUMs3XdoDwYsdU8oh2JOKPFdK745cXd5nrej40yzk+PtW8CDt6N2Cj+ZjkW9rO Tw+gSOhDf8IunJ9IB0zd9jjJihHFQOROQZ+fWTmAdMKxwIrLZKJnC24b6f2isYJD tS2+Q66XlwXOpxJmEeJvOa0IO/V9XNCWLhH3bGL0IZULYf05AjJOkdRykkXzJGGX 6M5bnOQk9GP68m1vi964iqgdXCumznQc87ui+YvS9hXUzqL8SD6AN6vRBCeKYblV 43rEDvdXdOO0pC+ki+6gIIu4oHGtdFgYDtLsByAlPvNJuEnZjsCnqivv5VFpJ62Q rzO1gIaVpTbjQPrrseHQpbg892qrGQ3YwC+Kxk6UZX9kB/oC0T8= =6t/N -----END PGP SIGNATURE-----