-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-nodejs-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-nodejs-17.1-bullseye-amd64.iso 4b7cf065db4f6209192ba076e7e2835ff8c355c0770828db5e255485f32056f3 turnkey-nodejs-17.1-bullseye-amd64.iso $ sha512sum turnkey-nodejs-17.1-bullseye-amd64.iso d70b3a1adb9c4951d236b9bd2248e8464c8a240fe5724482029d0d8bfa6715181c03577ad2218960e6c5bb5c3eee96492a50536950ffb5f4c564a241b6ecbae4 turnkey-nodejs-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-nodejs-17.1-bullseye-amd64.iso.hash turnkey-nodejs-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-nodejs-17.1-bullseye-amd64.iso.hash turnkey-nodejs-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/MACgkQHkh6RjHW /rZVNQ/+LpprpkSPZmITMA3HqrulaECqiwBq2tmFFjeK7IEmO1xPzw8Gh2lJVn2C Ifvxvqbd6yT1sEC2Xa8gWW2mjgZqUz/chZJG1g1ySKdwJevkNExVvRH4bXJTyjur WVcdDVs+94jmfZrsiQnBDvOZ2FSwLgP8OIcTIj7pg3w9MnvYKRQVICwBAQB13SO6 4o8WiMyAzYuXPQRKufdGPyMVczPmK9IzqHT3lwWt12l4lZk/WOkdq0hzxY8PhgMP ah0dLN4611qjE6Kj2IA08+MMjuT3+Ou6WZvHWwZkHDtrtjBFu8Wy8onTBB8+/zVC /yDVuPBkPRfv5L4VHcAShta+x6hqjTDuHxaP2Q0NHg7NMWk0HmJkjAE9pKYPzptc MO7hHp5wWvSCuP1RCKHM0iKLswoueXW/8AUN5HU3l7/JrO4VzL+RUjHztajQpAyF I49p83wMds0pSk8DzWykSEvmMbvFXqvaWkbBRXGRkLh+COqoEIAlzTi+HnBnJB9G OTm/8PYYK3LdzDq/z0FqbzrLlwCrCkoivZzlaf3sLJNPmNxJVLYUp+qv4rynVK2U uP0RgjyEhspLeQHHpO7pYQv2DOSMF+cymMfg/slQe4VZru+qPbWh3/xCxhmwR7sh tqVboz5+D5qcT7wvDdz/ckIpwUnWujJZ1lRJe+dW1NMsgHDgZGw= =0UuU -----END PGP SIGNATURE-----