-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-zoneminder-16.0-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-zoneminder-16.0-buster-amd64-vmdk.zip faeb4dc58a32eedb134fc8a789b9fd99aec6c61e3d80ad3785aeee17827457b8 turnkey-zoneminder-16.0-buster-amd64-vmdk.zip $ sha512sum turnkey-zoneminder-16.0-buster-amd64-vmdk.zip f4e265dd04ecd48703de3ba3d9ced913855cf8da48fc9a6f6fec90a24542e7ba7c2d7591c9a924d56695c5d4304edfcf8df48233d8b4bfab7fd99540336d7177 turnkey-zoneminder-16.0-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-zoneminder-16.0-buster-amd64-vmdk.zip.hash turnkey-zoneminder-16.0-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-zoneminder-16.0-buster-amd64-vmdk.zip.hash turnkey-zoneminder-16.0-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl9LYOsACgkQrF6wBJPl vBzgLBAAmNPuML7rTR0stny/+LhbRC4V52KVkiFVSgDkcjV/UXfv/t0RsaIJJLHB gpcvlBn9Syp/vsAoMKZXJhi1Znx+VE2nkH3+UMIwP9dq1vpY+21UTJRdj44LUN06 BffPXRoir1kb9zLez7jwzQLZ1zrJSzoarlohU0b1FXRe/FxJE3fUi5J8R3NCrzd0 njKE0HF+0BkfP835NHxoVznyBwvO3PgfN0sNEyGirs09+ALFGwt66tZBoan/Y4oa uB2paj1+cVLyzepqPvKiFdNBpWdHaB3LYD/E0T9ttDCQeaVMVPnImC4BgAAI/77p 4QQBAgt5jWLRBhhu2LOJU4lwKSkpK61DBavJEHENXeP+jFODW8gM6NAbVWl1AJaG xkgkLpm8MV7hbTOGQnFqq1sFUyPnfBeUIteZOiqJWkOqQkxs8AzKRWWN4UfBLMAM /8PSDqL/3cf6cUOR+rENGfPhZ26plVERXBaQl2qWj22DSUASO+nIIWNESa8JGQER S6PPK2sxLPql41n+YCK6t3cSN1hN9FK79p7Wy2C5Fc+Go7eggwIlLjav6AecHmwp lPy5awYLdg8/6w2xehFYdcmlq4Npgh2nqrqRdBAIYGGRrhAKIxmDeNTuXPaRinuZ ZbP1h0afU1SeuGrIbgWAhwEEOuSUQoZDAsagk6a5m5ffeKIE9Bo= =GR8C -----END PGP SIGNATURE-----