-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-bookstack-17.2-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-bookstack-17.2-bullseye-amd64.iso 6902984efdbfbcb939227d2ce720a7e6299794499c2fe599fdd9b4a5f03f2d6f turnkey-bookstack-17.2-bullseye-amd64.iso $ sha512sum turnkey-bookstack-17.2-bullseye-amd64.iso b7e6e611c9a4d59b6d5d478f7edde06dcfa50758469ae07fdc0aab92a967f7cedd38ab55c1e04e77216b0348c797ab75b9b9604d5aa7b930e87f079d7e661dfd turnkey-bookstack-17.2-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-bookstack-17.2-bullseye-amd64.iso.hash turnkey-bookstack-17.2-bullseye-amd64.iso: OK $ sha512sum -c turnkey-bookstack-17.2-bullseye-amd64.iso.hash turnkey-bookstack-17.2-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSIACgkQHkh6RjHW /ra3oRAAhX91dEceEK74AsJewV+d51W+snVrqYABt06y8F2h1YxCqtLCACEoDpHq y+Dl7Y/I21ZEnnuVHi4u+biPX51gDiqxZEhVhYIy7VGYXPm5yJQHzF6tJuKZKHwL 3Pc0G6xayMXRGnDpT74/s27TktpV3YnZsysG1sQhxF4nCjUSxf/o9FdS0zswMlfj wkNPj9Y3tnBh3ceaLfZCtJONkLRVtWcDzi5iF5ZR0MVuL9+AZso/BADQq2JYCsJV HNj9+oNLWnLP39wmaccs5SBRQNMU0vndpOCDYGUTIiEFu/iKMlSfbg5YSrr/fzCk gwQ9SE0lBHGJxcLFF/SmyN9fLblJKw70IZZZCErexl9pkManTJgZrKQvESdlVcZY vmkNPnnE/u7p8mTTCv/rHSoGCV4GiZ/b/MWotEaauvc7m1cilOFEeOnZDUQ1xlJi kS3izil5Fmv7/CgjjCL3XzMAFY8ZVXcDehxowS+znlN4T12MSKjK6vdSWlV4xTHt lAiS1IaH6klSyai0gacFic+29EcVxECcjXYUeso0gB/UwAI3wPC3nukCApkwcHfd NsA+zURw3HHYT89KfxZJIe3jHwZK28OXB3dAftYAZcCOZHirEy8Un5t7pZioS6ky UIjzDiLEV+TKLIPawDxXAma885WBPpNJ+Ple6gO7hgTX7eXtCS4= =0+hl -----END PGP SIGNATURE-----