-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-icescrum-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-icescrum-17.0-bullseye-amd64.iso f43a188349dc46c3db18611476f912fbc27e7b72d2a8699897fd01416a514dc5 turnkey-icescrum-17.0-bullseye-amd64.iso $ sha512sum turnkey-icescrum-17.0-bullseye-amd64.iso 7cb2afb7eaeb1915b4f59ca2155889c4b0e780c3f1592426bca69b78cc675b48ed8015f9f1799f92af776833edac7e3f87d5d7f2cfb56ca96d2b3b3477c56455 turnkey-icescrum-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-icescrum-17.0-bullseye-amd64.iso.hash turnkey-icescrum-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-icescrum-17.0-bullseye-amd64.iso.hash turnkey-icescrum-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJlPIIACgkQHkh6RjHW /ra1kBAAomLzt4z0uQnCrJbT92pw1WTA1QI4mwfun0tX6o4RYZT+1+2V4tiaHzko QYanjLENOilJ3aItrsinHAPpGJfI9ztcNaw4jAwEcMK0sX8876DXGBHT4mbZK8vx 3KI28mSrFbsgXi4KT9rSeXY961wstgW4ad5ScaJfMHpNldPq5G0xqfYs95VHkM22 2Do1Uyu+sOk8MD9aHJmg9E7JpHaODPzTkiQR8MqUilBORAxZygfHV1jHJFkOV1qD m3rFHA0wMFAlORe/6sDdlqvtlyyUsvf9RBkHfa8CWwu2vh1MCdfJ0jPfH2/XhHXE ZCXzNJeMTmS5FCqxoGfinU6ZsC22J19qIqpE36iAPqSE5NdilBSIjNc5dJVrlK6F URqn6L/VLE4oA989VKL60Y6xGfwO3bnJqxk6WyuRGWsuL53fhA4i88Xl2VgqOCcS n2f12XRKyVBRtIV3C8EbbZJooTn5zcylhHkFojKwKdchteMyzrJ+1jv+09e1f+iy Fx933FnkW97V8NKCkE+XWNYzHP1VEZiCf7NLFsKOD3pIh2MjWlddBMFPzXHypBeE 3vCaRTWH3hhGAf/Z028pQ8FhGFPJj3pdaK9OZqwdrYZPvaISfo1BnUXIcml1L47V xkNg126wlj3ywSWRRDmk2QYR2aG4YD1OjV3shybg4bxsxbQZCSU= =KGCi -----END PGP SIGNATURE-----