-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-espocrm-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-espocrm-17.1-bullseye-amd64.iso a0e98917255e4e2894287cbce46d5fa45f862527091eed1379e1189eb1b31e3c turnkey-espocrm-17.1-bullseye-amd64.iso $ sha512sum turnkey-espocrm-17.1-bullseye-amd64.iso fa554ca044acb4a0a7c4cd9506dc357e27b238aaf3ea5d610e487ffd912fc1fa222d03a7565a9059e05cb38dde754bbcffb8baf8e84b98b8afc3df519bb1a891 turnkey-espocrm-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-espocrm-17.1-bullseye-amd64.iso.hash turnkey-espocrm-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-espocrm-17.1-bullseye-amd64.iso.hash turnkey-espocrm-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CToACgkQHkh6RjHW /rbPHw//dwaX6oP0YbWqrCop2ilJ4FU3fxD6oYxm5z42a4R+a93UqJdR67+vpdLC bsNbJBQoYgHaekhrgS3Bgss7erb/eZC/HUkuuFEFZflA/3vSseoszWXwF6oA+0D0 fkvCROhClxUNcS2CYfLJ+QViMD1NJBiu81OdgQgt5/NQA3fM15TXEvm/ToZpWBnV ufmnvXUGvFzLvLp12pNS/ADoEcEzIAGkoXVd0LKOs35OkZ2XkPDRj9AvThlHL8nj pUYBkhSvq3Xy45gUCTHCQm+SMM2ROnu3LxoZGiXI6HpcA9fD1zpeMsvyvL8Q/tNw 4O86+sJ3CcInvaAkfCBTHsvumD6Jp8BQey0IIE2vUUwWfR0ioSOLI/Dri6VRDDEH INa5bEG7NR7NeTOUg6IPQOXmUNc+LBXewqL5rRtEFpmhvwt3y4Cne8wHxzJPyOnJ OqVqXCCS/IzNTawxzgMISrFCc3Oa67YUGQxkKhhEInAqGLLBVszZKZXPuF1bwhXv ZXyIFUp/iUVDBORS77lyIJyYBy1PZHz9GbPzj6jywmeFhA+OU0uQecUsE5l35pVj eTdCWZZBpiH/dW+SdcuVcqti4VC8SyFaO1CgDuSPEXfRHhfalQ/wrQtJ17Zujop9 5L3vAV40BUzCLVCfR/BqcZdGIGR0uL3NU+ZOPQbRdzYBSR/xK94= =LO3w -----END PGP SIGNATURE-----