-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify debian-12-turnkey-processwire_18.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-12-turnkey-processwire_18.0-1_amd64.tar.gz 195a41fd11b2461d2914ed0bea204e2ead19ec94d5e5236aa55ee5fe7eacd39d debian-12-turnkey-processwire_18.0-1_amd64.tar.gz $ sha512sum debian-12-turnkey-processwire_18.0-1_amd64.tar.gz 1b48b5da233b9a9b64d2f7d85fed98182a438d0c8818c077985db12c1e35a38030734c57924a05ebe1a0f608afb048515a76ed840ee244b480a4bb96888fcd92 debian-12-turnkey-processwire_18.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-12-turnkey-processwire_18.0-1_amd64.tar.gz.hash debian-12-turnkey-processwire_18.0-1_amd64.tar.gz: OK $ sha512sum -c debian-12-turnkey-processwire_18.0-1_amd64.tar.gz.hash debian-12-turnkey-processwire_18.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmYbiCsACgkQkPLGHN5q 3jdB3hAAkbo6Kw3HTw3ifRVJ10p/ltVmFn7enZBYxqy5WUqlFjCRogIROxZW7dUx AW54FaSD6vfx3mpOiM2/R7VRedWUwqYB4n1DzJdSV23sL5klLlwHPnTNCD+26vPG uBDdhEV993bQ8ivEWaQc1OVPI3gzxR2SEpLWY81/rMPUH9pYMq1rjn7dGmjWck3+ GyHSLxrnqlAKzHgFkl4ixT4kBnp4dxDoBtnX/yseaEZz6IefmAUlo9pLmUFPkyOC nelktuNzjG46jC7E6GAKjnmi4agCuCMfbnaMKkUJ1Nqgfl91WIv7Nm1hXN4DUaYY yDy54WEpON16xBtE5skxU1PNFFBXVNEpDe5YRmCH8AgDT5pA/6Vfw5SFko9QHsU0 5adZ/AxQIszo2AeI2rpz/N1aFo766NVrJWiv+RJTUvLXlZIBc27BdqXROefHAyVR f662wNdvsNr/LPrKU50QlbsF+WDFDknis02NxyZmPebqqxAhibKZj/xeNVNfxtX2 wr0ykOD9kuZ4vfTlrCj43vSR9h9qb3LnUYgjWAKazKBrUCp+zrfPbjzU83KfZgzh WjLEpXfB5DWnQeVWIzDQrT1/oNs9p/MBnq23TfUjC08GX2AJasm+TPXOLxppv1f5 yFRW+Zje0nJQejlcFF9PRKd3uyOJatDCC/pTp2FqOih5TgkylZc= =qGtY -----END PGP SIGNATURE-----