-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-drupal9-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-drupal9-17.0-bullseye-amd64.iso 21fcf0e19059e4fb1d149946f670c80869d07cb58561fe49640a1fef2b5a2f44 turnkey-drupal9-17.0-bullseye-amd64.iso $ sha512sum turnkey-drupal9-17.0-bullseye-amd64.iso e8643484035fca2988964ed58b8a05fa93f8c006156d55ec03c44e4e8cb6f51c457c00b59ab6c2a4eb8137db38cb7abe628f00d177caa36339e21fdf8689074c turnkey-drupal9-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-drupal9-17.0-bullseye-amd64.iso.hash turnkey-drupal9-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-drupal9-17.0-bullseye-amd64.iso.hash turnkey-drupal9-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJw05cACgkQHkh6RjHW /rYMcRAAnsmjDblnoh+s0AS2OCsMwiTLHikEwd5IQLfUhVRcAziYbQ2Wb67/h52u 4j2FyWwGVCbYLFrbdVi384XPGv/LN8dljrx+8uoD2Zf77tsR1kPhqpJJsK1fF8P6 w1l4xVHPt3h0Ny6KsNYHWAFPREfmvLFHLl/tt6hpi5OhF6NGmvYZ0Hi3serCxSGc h5iB8Nz9/J2keJOFzD6ZE+T4WTbsaLT9hE9hb/DLE5gsgZptLziWWNWN8ZHZUG3T FpoIm7asry7pkgH5/K7JStUeuhnACTkf8zhH6UMn2O3NSXsl9Vl5WFwwcvk42yDM fBnZ/4eE5PXB407ZtDSfO//GKM36EwMKZ8Tvo00Jb5/Ma/pvvMtn5vKc5a36b0+M MyqIkG4adrzUjs1m520Gc2HyICawRGYLbn2Ypvy2dAdtP9yFBhsX/mE6YCp/SSH/ x3CSDqc6TTwHdYU8XOo8j5+bRII6jV/6MedCzKYgWNvje9bNH/AJ/YXBofORHkhs iejV/oyLdT8zUpQGOzrJ8BpWSujn5oWIAOOsnn5yAMS6lbVFstkostOR4o0xi0XZ 7+cr2N1h9CpOKfoznTTTEI+SkUEevRwb/FQxfrs8awy/Leyg3931NeCdIfpiZIcy L8XqyBskqNroB+LE2XUag6tsoGCg2sdsL1kE7jtbMDbi7aXgbgs= =y4/S -----END PGP SIGNATURE-----