-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-concrete-cms-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-concrete-cms-17.1-bullseye-amd64.iso 4bc7275c9087e12fc47eba9db3ed448c40be50d15b25919d16330293344deac5 turnkey-concrete-cms-17.1-bullseye-amd64.iso $ sha512sum turnkey-concrete-cms-17.1-bullseye-amd64.iso 3de27a10c98da62228ce5a9925626308b7467ee80b18edee880bc37799662fd3f8559d4ced434498e1e16bc723626f4ef0a058047a3222f71e5d5632e7ade08d turnkey-concrete-cms-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-concrete-cms-17.1-bullseye-amd64.iso.hash turnkey-concrete-cms-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-concrete-cms-17.1-bullseye-amd64.iso.hash turnkey-concrete-cms-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CToACgkQHkh6RjHW /rbDBg/8Dphg/EY1JQHZCKUllUZ0b35aHmVtmo90TETCUq2Qwv+E/Cg96SzEY/Ay g8apV0GNyNPIojT3cBy8Bu2+UQWlkUQOhSZymu0bv5hQz7wTs1HdLuy2qXRVL3Bu 3FtpzoZi5kuDUuvRnt30XpngSTCVedXlNdqtpNER9KxlHWIwJZuZoQnl+Vx4Txji RGEGz++M8y15iLEP0NMJpVakac4F9OwIhiMwTZk6fa3xRfPsj1UeJVHTFK45vpHR PGjbVkZ3JrIN97Kz4B9DHusoZAtFo+tJeWewqUuw0etjRBtDkzRktkvd1I9d5stA JPnRAga/C3Vfy4VM7XOksB/pYXvbWIZpaqarbq8JKPm8SkoZs8616iXbd4SwYXD4 7NdTrzYsa7zcUpbwKfm3vGXUv9ARqD9NoXiY5vjkq7BDmpyF33INQlt7MgvYw8Ua 99QgNcnymOmhCPEEF+stj/Lj/RqcAJlX4YI01AUne0xoq0plD/jZ6g9KooZe4lso RyctRNHhsjade6TEVFTLd/ygSFu9Oc4+FKmpvDyPI4wNBeNV/YDgHa8fZFh9y+bQ YO0/jfpsiviWXDP5mTNwfGzVg0tbmyfbLPxIeLQ2mpryOxgnKwVFaNFHxiKN+tih X9Tyxr0w4AJTC4/8QLarDKfRSoQP36S+pppTa2ZEIlxWNY0IUTA= =3zjP -----END PGP SIGNATURE-----