-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-gallery-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-gallery-17.1-bullseye-amd64.iso d3e105504e88dfd0aaf375063b21c5486243abf6d20eee6d8336eb6d8d148556 turnkey-gallery-17.1-bullseye-amd64.iso $ sha512sum turnkey-gallery-17.1-bullseye-amd64.iso 734851ce37031362ba3cde917ea447ab6afe50c903af9de173094e24c376a5b7e11c514e8df88260f0834fcf8f47962227efa46f084f6933f51463d465b2879d turnkey-gallery-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-gallery-17.1-bullseye-amd64.iso.hash turnkey-gallery-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-gallery-17.1-bullseye-amd64.iso.hash turnkey-gallery-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/AACgkQHkh6RjHW /rab5w//eodp3otE1LbGDTzBFNQL9acSQkpQfmAci7xQkc4ns9Xa35oLbwBGuxDj /zJCatZwz+o4zmy5PqdM0lePBwCd8gavYivFMD8xMSMiNk8rjNr82uv/DW5j2Ouh NuDEb25sDujJQdZpUHFbtKK4ZWrZoEfjWDtVpyQcKLDBNH+0G5hAHkOUnP6K9Cnl xh2NLc6rEaP9fvoYPRkxe0rX06ACuH1vd5o1JXkvQzshFqSDUPIW56jCq8kckVbk RlvcUgFg53Db4laAw/sw1WO6C7oCxXIP6gXFUXJOwDkzuyR1tOnP5X/JxSfPAevt 0dBDfngDPX0uf6aWfwHVTFy1Z+NXHEFakd5B8ftZ5K8wYatqYk++tjc6l5iHBYxM tBBUv4m0PXpbzZqpWJtpW2NweULHr3knD5YmCllq9pRnEa6BBFcW/uj1GFZ9BZIA UcfgDmH1kAvPehEdT8VPr0AMdlUHSJqAL4+g343CXaksvERhFsd2QTfpM2Y07oYi uEnjhgKZ9mXi50doJOQOYOQMfGSY88qNlHqirt+Kslzict7azwb1BWdX2fnBVaQG cK3PIXFC16AZ0samcJmiP5xFpeLCUA6sa69qeMh4qy2Scu0AU5Drrx4GMJ9e7bvq WeZRcTbSdoMMy3zku5Ew80sb8BNP/gJNk4R2WG4qrvB8B6st668= =rbtO -----END PGP SIGNATURE-----