-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-prestashop-16.1-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-prestashop-16.1-buster-amd64-vmdk.zip e995434cbaeaed1e83eb664dbfa7ffe3462b7af4a77b15bcb35733230fe9e0ea turnkey-prestashop-16.1-buster-amd64-vmdk.zip $ sha512sum turnkey-prestashop-16.1-buster-amd64-vmdk.zip de2b990df540cbba1a2a0af52a4cca7efacd8476f58e482c63cda9bb477349d8f163c69b58c78300e4ef038f6b2c452a4c77eedea3fb9e5819da217cbf1e7bd5 turnkey-prestashop-16.1-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-prestashop-16.1-buster-amd64-vmdk.zip.hash turnkey-prestashop-16.1-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-prestashop-16.1-buster-amd64-vmdk.zip.hash turnkey-prestashop-16.1-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmBh2OAACgkQrF6wBJPl vBx68A//VFnd98+AopGUT/rwUS2btarSlNptefFZIKUcDhku1RXb4yY6eXPQ2uRZ C+1QptpeXYTWxKtdj+8waE7r97359Hqf1yvnLVd+TnJ8OaQLoxSAhYQtcHdO0T/8 k97s48kAemRPMQiBLR7Yv4AR4ys3Cfe96khHARliMF5xobbeOB5ObWDhl0ck3eNa yfMDT1Kg//8izifmgni1v1QMhvnPbWR9Z31KnpTzsPG1o5CXjCPg05plnMNOz5bJ i5FCoOaHff1NhWrifLTt7fm+5esvsVtFp7lYi7vswAgLO87F4DGvwv2dFrYyfP6K 3xdg42wh41YzveYksTfPck0fA9PvWtufFnK0ccwxRrdBKSAD8RS4GZr1+xAgZyFi 9oYWvw7+C2kOCsNbtgzhBddQOy+I/KbNMUpUkRd4G2vyWLq9hvI0j+Nu2X69lsDf C5oUEWNi7gcpTv3pCYFTxm8qsLWDWDPL5zmj0Y4wBSWS/fooHjpUxmkrBb2/gLwg vYJiIJ4p/Dt5SJcCPQKnPPdvI6ZKjsxbfSoxMheWsYYzACbwmGAmDlzwBsJhh2g2 dCusQKXcuE7aHdgVeuXRmnAE47MJGZ/iBthjzyOau/S0hKrcF/f9e7dtzFekWWW9 EE4QA3TpkmOWNNYYJtF6f00h/78sCUryAfOLP/URZ83SfSIzWm8= =H18M -----END PGP SIGNATURE-----