-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-gameserver-16.1-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-gameserver-16.1-buster-amd64.iso a4e1ec6481afd579e870361c15bd40320a5d81cd3fa9e2f82ece4ddf7dd28052 turnkey-gameserver-16.1-buster-amd64.iso $ sha512sum turnkey-gameserver-16.1-buster-amd64.iso 245466746e17b396af8a848116bf1a5c4241e8b52d41e416b41b03ececf37ee555dd971a2d7e16d6d6ca58c9867e608718b88a8f17e3f317c141b25ba2c8ec69 turnkey-gameserver-16.1-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-gameserver-16.1-buster-amd64.iso.hash turnkey-gameserver-16.1-buster-amd64.iso: OK $ sha512sum -c turnkey-gameserver-16.1-buster-amd64.iso.hash turnkey-gameserver-16.1-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmB7288ACgkQrF6wBJPl vBzt2w//bLUh2pHFgpHfAwp1/2hwOwFpuTq5nW4BmBx6/VERYyKQuIVIKQt7GxSa JdyuAErh48s9bp5de0TIyLVFjENxrGf5uU6VsdzzyunRBkrBb96pqe+BoEaEXmLS p9g8OyMKjLvPp7eEWY4amR/wiGOaj2J38TUpiFBkSzbcxMHD4oq8NZaPqu9Vle7U 95oifZXIy2+xdvnNf7fcboZvFaqXyG/SgNYpflCPuh1uwsZepEecPlJjP0UHJCaY wdgn2zgGftC1Neznm0ZHqgAbK2MNDA1Cojzl8Xu2q1V3KhDVCAZwtdV21JzGNA9G cbRMIAUIa5YQr73ZILnrV1PcKoljwAU+C4D2zfrz0f+cWqcZ0FArbJum5BGGY+YX MLePAKmXjRRV+BL17EHkE2J6sqIUFaAo/ZE/Wp7jeBXu8stVCepyHLoaUn9RqHKb lBOdYW4hm7bId4A9u6VTMIJ/8Cl/7cNVEPOMFcmgHk2sup3uFExBzMKcSIZJ05jS 3wYP8XzElTy5b1aagY3a/CVPSrIKnRz5xigGOFfh0fgy/ZIBKeWiNrxwkAMsAczP rp4uHNUg0yIqnic1rF6OR3UD4Q+a+yTAz3zdFqCo+spb1WL6xZLaG9hUNVSacwFT BMp5ahB4IDwBsB8b5nDX9WjApnJBYaaLUXq53QcJ3RQwezW7aDI= =xgBP -----END PGP SIGNATURE-----