-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify debian-10-turnkey-odoo_16.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-10-turnkey-odoo_16.0-1_amd64.tar.gz c1e23ec06f16f9362303329e553eb31fab8f5b6ba27c1416f0b657cfd9d5982a debian-10-turnkey-odoo_16.0-1_amd64.tar.gz $ sha512sum debian-10-turnkey-odoo_16.0-1_amd64.tar.gz 251fd5e873ea734d069881a24653420713f359cb061cb564dbac6dd87d6c24992c0943589aeb80cda30e6b64ee4a146605e19fc308b0be1ed7c4ec564c0e738b debian-10-turnkey-odoo_16.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-10-turnkey-odoo_16.0-1_amd64.tar.gz.hash debian-10-turnkey-odoo_16.0-1_amd64.tar.gz: OK $ sha512sum -c debian-10-turnkey-odoo_16.0-1_amd64.tar.gz.hash debian-10-turnkey-odoo_16.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7co0QACgkQrF6wBJPl vBxLjRAArHOa+N6c38mUafIef9MBUR+cHDu8kfsdwXUVGAjxrEKqOzAL9PifN86o p/cttJNwKCgVS6ejQzM4EusD4QDeCgTJmtj8mK7Zvw8x7TKXwwKqLW4/8Zyaiu21 gJWb8ppwOOXA1ZkOlfz7gZdfdkHohCXf2FM7TZ6Ye8F/ZR4wstNCXi9sHNiBjc4O +1iqCJw9fC7uc+1XfQbTDNTTVjNZ3wb88BFDo6VxghiBRKJ8lDJ1dRgJGOL+OYew wId75DsViL8SCIzuCU6gjmgbsRqtdx2kBDsBM+FBr3+MdDp7N9dA6VFc2A0BLLcH Pbf9A+3TGHZ3MAXf2ZIZ5LJc8bmdBgOsNdRpUnrYriY4/ToQFmQtruneQ+OjA4Fi MRjEofEXv08wFzYqIZpMNukVDv+J8BJ5aJKlZo90lC8p4oQA3RuicSsHD1i2BxmD 4M99NnPi8YVaXfQWJNBf7imqOhYVroRD+IT64vAdAv0XNb60Vdhs8fiod3cBVs2s NnBMbYQFV6CM6Jt3hq20o7l02Ya4PExC1qXhUYogvdE1V7NYC6pQghygmaNCSQeK 5Mv9uEm7oNBDcoTSIfgdOy0X9hHlje3QDoc6+rCgMKrKmJH7KKsRHDZLTfz2pmSk azIZOwFuY/2RZIOGkIqaECQxFqs2jIBCDRYrUbJbShFHDwsfaK4= =xj4B -----END PGP SIGNATURE-----