-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-gitea-17.2-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-gitea-17.2-bullseye-amd64.iso d040f97d260ea66495916d5193f0c06e6a4d2cd3dfbbeb86e6d56ee4ad2def4c turnkey-gitea-17.2-bullseye-amd64.iso $ sha512sum turnkey-gitea-17.2-bullseye-amd64.iso e943a69a811d8347f2ad7b09ebd87d4cbfaf742c91f477c57edbc0bb64eb9dfbb07e3365fc6ae7d390e64eb8ffafdb60310855dc64d47b04c5a06136b581430b turnkey-gitea-17.2-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-gitea-17.2-bullseye-amd64.iso.hash turnkey-gitea-17.2-bullseye-amd64.iso: OK $ sha512sum -c turnkey-gitea-17.2-bullseye-amd64.iso.hash turnkey-gitea-17.2-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSMACgkQHkh6RjHW /rb18g/9H7eyEMp4+MS9KQSSSxbmMJ0yeueHUztZKhAVo7jebMPx99a5ssWhgdxF s82Du/P4Xn4m0QEgtskyhK+Ckg628J7uDdP/I3vu7oQb0gAxqzhcIWg07KHd5oBF i/3OFpQJkuwvml+HycT0rLPNM3gO/baDaXUDALeu6qCSvGy1V0XPIONBHeI/Q1Ht r+2V3t8ZOJX+tnAgoo7D0FC0HLjUSt0HOeb8ErCh6M9uyePCNqBucAbcGm7s3zOb m4Azaq+X6SYdVJf51qZ/2jEAJtIny4WdWejSKx7n5Oko/JEZk6f8KAcgPNaihkPi Na8UdsIB/GtMQrPt6s2NYESzVJoW63UGuD760MODjYlV0aPjENNPkFbt1Hl6CnPt u+uwcOCPKKU0ERuviUdYwHfQLA4fcW4726KHogZNxf/rluq99p0fQCYq1eJudbt9 GmTG7VsoYzqWJV3EbM0x9U9sUOAetxBbGd9Eqkq6vGTPe6HjGL1Ew0xMySj70wVt DdXIRQFaDRtcav8PAE15y7ihSbiD6q3ami5BeM1r+n+nUJA6lMSw4t4KFnHWHMAz i+5q65y6FllhdUuth3RE5JmXnGQu/FavPCRIHVkHCE534Mgue0Djbk9RrnQSTJvF 6tvep2zHUB97EbP1llfFNFsK/5jPPY6r4rVLrV+53EaVcVexgmM= =1aIj -----END PGP SIGNATURE-----