-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-bugzilla-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-bugzilla-17.1-bullseye-amd64.iso 2ea4a68b5125641eb69ec95e26a242d7d1e49d2f9327a11ccbda241abd188c6d turnkey-bugzilla-17.1-bullseye-amd64.iso $ sha512sum turnkey-bugzilla-17.1-bullseye-amd64.iso eee4d14807132f7ebab50249f4c2e96caa3d42955a66a97d574f7510fd7c1cc79f9ca3d8e16b590998666db611f74ccda5b5d608c012dd4a4db1749b74e38425 turnkey-bugzilla-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-bugzilla-17.1-bullseye-amd64.iso.hash turnkey-bugzilla-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-bugzilla-17.1-bullseye-amd64.iso.hash turnkey-bugzilla-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CToACgkQHkh6RjHW /rYMtA//aGUk4PMBSpIGiLeZk9OCyEinVeOgfiK7yJzWwgDOQ3/9yHrijkb+yEFt 6e1SxIa0kQDMSNWDbCHEEq7Y9otrGWZ86cZcecrwcPtnIzYxZj6c2YDzFg8a23We vCyzkC4X4Ousf4QptY9nVwNyz3kMc3J3bE4iD3IBB1/N3ponqj6ndeanHSyfX9+n 393DMecNfDEtcsg0dcLb18c4YOZZtV/9DU21yMzUbI1HF9Q53WEvKb5tmhCi82hg eeWf/TL6B07ERfDDqxoXiho/gC8yH3ULPdkZ+ZPy+Z4/Gtke4uL3oES28GaUGWgW Db6GvE3hASOUTp1TVZ6OsH+0g0w942yufqe4WsfTZ7dDvaNiV1wzBLksgAbL32Ek +4fpf4d1xgVaRZjEvSUDXGYxkqOW7LJwVDvoEjihzy3co1gaRMASRvoH1ci7EV2V IaY3YnE9inC9MKWMrCgwvtHogJIMk+uWoC9mgh/NXtiw02CPUq5OCHuTAPXyOK0+ CwDPDMfOj+Ru67PQbPeTWi9S5QsgiK47O+uoSQjVFMpc8IDgsQP2un5UR0sRwah6 2xcZojVlLri9/SPVQOaveEkqZ5C2SVi+E/sTESCurO1U0c25YL7we6c9ITXPnS5/ x3FPQQjaLcSCbpUuv10mLrEL7z3o5mAFcKrtbf4TkH7IBIJJ4eI= =28xK -----END PGP SIGNATURE-----