-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz f971f4e2786d9d4cd8eaebc899d66d9c319c76ddded6e3502e28e9887f7cf841 debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz $ sha512sum debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz 96cf8652734a5f0a585615ce73697e0d68cfb8e677e8f675f403896bef957675d082890d7aa06c8d352d2fbbb73ddcc04e4ee465a2751192d90bc813061da7db debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz.hash debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz: OK $ sha512sum -c debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz.hash debian-10-turnkey-faveo-helpdesk_16.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl/YwaQACgkQrF6wBJPl vBw79A/+JdROnZ1Ddo6H+ruL1GbrTq+s2YKKQD0dlWtmKt48/ZFTs1G+psaYKbHG lGPQeKZvQ98PSPwQRNHHBQVQFWHm4nUoPH00aHk/wg1KnCd8pVcgYp8wVd+Hlw9E OZDcR7vGgDrMegO1brpzjXPKIF+9d5o8IZAdqVIWFWUsU1T1zeLJAQn5msIx+DVr 03cgmHEgHcFHR/ZniG7NgzCV+PRDy/RNPAe32iDCGiaX5QL3giACT2VIFhadPczD ZPvaCcNNcX9opabNsnGc5bPEgShCETzitLjQ559QQiwviXrrmXNLvAaoetrMJ3bS RS02jKft5UFgwhjW8P2Zd11N4F3eA4kHErycbqZCKBTr7TJQ2IM2QlCiEbsX2YnP 3XAE+h0jydyUlV/pW1LZLsQ/8rgbLlyAEGUTyT8ts7nEa1JH8a0+Az/lep1jYrWr mZvecHoYkC5O3GcxsNB6JnpWyVypdAOIm6iMfnzvp8G7ncr0hsdqxdEGpuks2vcn RG79Wus7N+h7fhM3t+PYekR2nErtb6p/CFEIntze+1qR+WKblZZLMJvdS5W1U1h6 d6eXHFtoOX8d9MuBDwaHXRLWZega4cZrosSK5K4DnjgG/+xa+rxe7QQZY28FcTU8 OHuLfz88MMlZ8aSXa6OK2E/lamk+PFvJ/ldNkPulvS5rmniBwHo= =R2OY -----END PGP SIGNATURE-----