-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-bagisto-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-bagisto-17.1-bullseye-amd64.iso 3bf5cfae3f7bee28d900ad7ff05685f74e39fd3b7b8a09af9ed47d138be03d2e turnkey-bagisto-17.1-bullseye-amd64.iso $ sha512sum turnkey-bagisto-17.1-bullseye-amd64.iso 5c2b2bcec1269f92989774d96516d24b544d22f480bdf04a4e2e3cea646707194615ae33b73c4dcdad08d49d3d40448b19b1d3a5df9042a69eff10f49bbd62ad turnkey-bagisto-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-bagisto-17.1-bullseye-amd64.iso.hash turnkey-bagisto-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-bagisto-17.1-bullseye-amd64.iso.hash turnkey-bagisto-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmNx+zQACgkQHkh6RjHW /rb9ww//b1r0dBOWR1Q7nXqKts/KpHQGNhF88XrFgzf7WCY3pT/Ol8EvGY3BkovO AhhQr+XEsJxdO6DaoisYZDosFvdUNOS/WY72+02vjHM5yloWfu5v67heJNwQ2Wv9 pTqKeXx9rKRRrxwfDSuU8Mttgwtll29Hv13zvSksmL/D0JW+rEHuFF5rnG8LZeq8 YMWG7K+P2zjRgtsZJCuKiLoNcOchJSTc4plLdhm+tAnT/7wD5+/5b4m0yGBaYM1y 7Q/r6gvczPQhijL5Ag6YOxMWSWPlUIndE+dY0v0WlWJGkMGvHXihtnoPbuFkJvrO RUDqxLyijpWLKR2dZ9jCygocmBfatqaQhMQhwmsPERDq7v+/AGomvhRS8WXS43Sn jyW5Q60lVvcxYlMMHzcoKVQjsrtwrgTrOMI7sFfQIDw097orgxjvLZiWbLMc4oaE MoL620O3hPmGyoRb24i6KNC1ig9E6D/fm/aP8OkMJrr/7k91IV5Rnwgt8LeiF3Z8 7zEm+Eis9Ssz7v/I8SuMvhA797rqBMscRIZeZEU8okQkcekWqHIqU46rNlwUlhEC AFnSj7s7gS/xVzzCyRee1dIjA5JKoRKa3a0XK9/Kd8pa6s/czfRQ7LuocU/2dJvX RCBQl6GwCVzSy8+kOW2kGyInTNKQxXcMziCjTuTW/Fbbcu8mXjs= =OCEj -----END PGP SIGNATURE-----