-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-gnusocial-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-gnusocial-17.1-bullseye-amd64.iso 012725d954b16ed4cbbaeb9fee9a076553cb7d37046b63e51e7f62dabd04c1cb turnkey-gnusocial-17.1-bullseye-amd64.iso $ sha512sum turnkey-gnusocial-17.1-bullseye-amd64.iso d4d90a41ec2dac2fb9f432cf6b0ece31ebe0572fbc9913415be412afdc8a3b693a0820680c3a2deff92d31d424d10fcaa543ed9e9167c321838d604143bedb5d turnkey-gnusocial-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-gnusocial-17.1-bullseye-amd64.iso.hash turnkey-gnusocial-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-gnusocial-17.1-bullseye-amd64.iso.hash turnkey-gnusocial-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTsACgkQHkh6RjHW /rZu3hAAq9DqiZARO36TrAOWZ/1Sv5bdNlubHUXdcQ0QrxS/L5vGjhiJMXdN3Hoq rxgfxNVYq4U1xEuacjf0YvYolWVB+APsXrqfIlenLhxQ5r2xeebHHuxhfKNXmBvx xu5US2PkBNUC11Yn0yxuK8xNHaa2/vROGXBZUNwq/HXA7KGdERZG3ORTMcP4fp6r Dd+19lTOm5iVYQ+sHPVYyfBVA9ge7KEKkhfXjGnVhWlk0RJmfLDyPC7un/qIs1bY 8873Oy5kqTpzJEXB7iwvh2W3u/ofpov7B4i8D9vBrJzl2ykRVXtTKZuG8aV3A3YZ bHFMErKN1bl5s+/2w67vpkExLbDCYwQB9iSbUL/BEso46Qshvaw1LawwE+ZszEtm 2KqaeS6t7DmAAWJg5GmNx7NGvSzy6IvDXWjPjvS29QddAD1VF8sBviSHZZaYOHEL erl5dEiIKvI1J3PUMLrkG7mC3q5avjiQBOjYUP+ERhENpsX0iT6jl7+30mIIl9zJ WaOFJIrb5koXsCh+prFGNHnVBBS9m77gJpakutv76635055RFGP6Tzr4GvbCQ1+H 7s8qvLgCfRMdzte/jeZBTNniHAneI1maqcO4ADfcVXSS4gDquunN2FV1cNR0EKER 6NVUjCwf+z2BvGyyc7di7jjGjf/1povw+UTB/04y8R9VfqeADHE= =DZaj -----END PGP SIGNATURE-----