-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-faveo-helpdesk-16.1-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-faveo-helpdesk-16.1-buster-amd64.iso fe6aea01dad6969080a4dd21b6e1a2c9e6ea2e11d4bda90c1880a7094fd72736 turnkey-faveo-helpdesk-16.1-buster-amd64.iso $ sha512sum turnkey-faveo-helpdesk-16.1-buster-amd64.iso 6c574631220bcb9cf5931d46e6ba12ef7fa4b29bcb5dac9f2965a955b5fcbb5463f0c42b1b7e4d892b944c77c3d3668c305a0924831326dc111ad41150f4ae27 turnkey-faveo-helpdesk-16.1-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-faveo-helpdesk-16.1-buster-amd64.iso.hash turnkey-faveo-helpdesk-16.1-buster-amd64.iso: OK $ sha512sum -c turnkey-faveo-helpdesk-16.1-buster-amd64.iso.hash turnkey-faveo-helpdesk-16.1-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmCOURUACgkQrF6wBJPl vByi7RAAqU2kHg3viWr+kjUAGOG69FvfQodOoDBdRE8df6KG3h4SwowWuiuny/AT HQwHBtSqA1cLP55GsDlL+6lWXW5gzyQ7yj+b91ws9T0ETFOzR/X6G7c5DOKTo/Wn CwlJaIRK1LeSpDVknFlMEFmvSTheK0IgDJWKRgqUb8A5zcsGjePsfxFVZl7fQaf3 wot0NWdnPuNn4O+B2ElLpt9ZQ5H3FtpUU1KXaOBM+f12XI/vNHJ2adkqnh0SmAjB tfzmSwgEiiu0pQWa2GjAvDVhGYFv0aYAzawqL0S0AFUOst5eEHz9qfYTeOqJ3e1R +dv/3ZotEfulWdjQ8RPjx9WEErrAgmRM85wsZjKVXrU3ZCIE/U8CmxhurQ54qC6a su/fIipequPbmCguuk8DZP24dPZURpAcNj66OWPawo7CSz6wtAX2Yaw4AWU+3A4R 33pIuMP73v9/U6tlaOZ3TO9i28EWjZsaenPxBtDkHNC6cuXJtKei2s93EfwycShL pMff3dHDA8YHNLOCNu+TQXyPRpSoX4OvO/ShUtqnyJ/jwpWBsuG79nFqXlJI67id NcYZa8YFqrvH0JhxjWQcQfrgTd7vxvUZ4RTkAjEPXr3MQcZ2uY1yvZ7pq+gQZ7dZ gMEPSpjgMy8uv7rptGcGofSQCL6YDp6HLxJo5gTbflMlxkM+bqg= =VMyA -----END PGP SIGNATURE-----