-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-prestashop-16.0-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-prestashop-16.0-buster-amd64-vmdk.zip 7083ec52742626979868302544a11b6c5f114423fb542b65ae7c205140cf97f5 turnkey-prestashop-16.0-buster-amd64-vmdk.zip $ sha512sum turnkey-prestashop-16.0-buster-amd64-vmdk.zip 0c80b2fafa5a080ab1add820f755029c9ac90a61811c570cd2598100621aa661f4d9f79d7e2757ddb8f9c4f7925f86e972d2f15019928a59e503dd945d9b928b turnkey-prestashop-16.0-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-prestashop-16.0-buster-amd64-vmdk.zip.hash turnkey-prestashop-16.0-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-prestashop-16.0-buster-amd64-vmdk.zip.hash turnkey-prestashop-16.0-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7vE5sACgkQrF6wBJPl vBzENw/7BzxiTK6mSWDjGe6b42TxpDr8MneUKVxDe3fR9bp0iHGrzaR64/h02m71 DnQ+zV7E9HgwHdW1hac2EiKsxWowj8bd1x9I9izhvqKo9bu9jE2eTN5HB7x+TWOY 6j3JbTvlW0CBlBPVyrViFNXwsVng7kn5ikCfhcChaPp97zsGEc0TY/LOgldHrsXN TK6P26WU0oeSAFOrLxpyRhr8OKz9j5x7PIGTfiRaXrERXiQ4vTuG6amZwVwbQl2F 6EtAecCoR/OzveIVmnTzhJYfdlve2yQTvW7iOb5gqUQaAQiHmgpSToB8Ci4yt9lP Ii+PqKBugZ5zSaQIkHa3Xcd5YXLK+QDdKy3ZsTe0qFnehZ6LzbL07bbr+lMOm9rD lmo8+c8XG+f27kgSRtcDqJFv0gVq+QwlMO2CMlURbhjQRefk+LubXAEcZwvekDvi O93B7V5Jhpwkn79S+QxJAAno0BRcKv/YBqsoZCBtyJ+OnzAP9sH35JNIj0ePfN5E zJfx/HVAk8yrrgYF2bEa5T+KG7CDI/P8ERj9BfcyQMYc4Pu6y2cg5GjL149atgnn urqqDmX9JKscPispc3HEZEj/Uz5rOSFgWNQxmJQ6UblE86KG503cu3CUvdMvuTce a+BSyx7Jla0UDzy0hHsSkm/OSjH5gxuKNMKvSKNeI0Npv0V86Ro= =iTah -----END PGP SIGNATURE-----