-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-icescrum-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-icescrum-17.1-bullseye-amd64.iso b83e071303b0784c3c2e778f40de096e90ae5f81ab9c5294ec150c675c5b32ae turnkey-icescrum-17.1-bullseye-amd64.iso $ sha512sum turnkey-icescrum-17.1-bullseye-amd64.iso 1728ca536fb5e9cda0cd0c0dd7f5f8bec62b20ef91d5f8d8300836a00f5a9039514d2e6ca12798e5c78898aaf091ff5859156b24c9634c63f21b3313653b3361 turnkey-icescrum-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-icescrum-17.1-bullseye-amd64.iso.hash turnkey-icescrum-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-icescrum-17.1-bullseye-amd64.iso.hash turnkey-icescrum-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/EACgkQHkh6RjHW /raMOg/+PD7ktVYqjz7AHyTXQF51N8ywvtt5LKhn/BpX9pamc/+zP6MzkLt0DKGT TORdYU9Sop07f/6AX2dvUgr8Gu30hr+lxe2vcKEu/NOnG5v4KYydbsJmFaP3eCf9 ALE7IvYrZvQxAm8cZU0PagyI4BLi9uOT7VLRpC74UaluM+DDBNArfaFeJHdWwYGY Sbe5o4t9Qfsw53e32GJ4RW+CdE8YEVhdOKUZKPjzLYAYXc1WvRgUuADkC19owCPc ZEISumgfz8uCQY+G/NDlHn55C0TP6iunuPfsmCtNG4fB5Hfbvv90i2q/G9ZCTsJj zjUF5QddoI2RrtzkE87xgxcq/FH8UU680cDuSzS+Z+fQbAGGGtU3UnE+nSI+13ki OANawQOzFheNdfwGpY5PvsROgoz93bHh1AP5hy1MIBg8LNF2FFss+vcoTVdeNKtg f5ZdgBBv+P3MXhkE6iNIHJ2GkjVOM0l8I/d9/vpJr4B/0JuC7NIcOue5sn6I/odC aBf5RQbSN1fySgLcWdohKefjP4f38BCiFXV/lDnSMGzn8ZpcAgdCnOkbNZaMzucJ SE2SyDCUGncGGE6wnhhUuT/dqZrjO2wiPGQ50rPkcxdLWNWIT483h0sLRQ3eliLR 7T8KdH39lexASI4egzu/jxv36p4j2TKyhb8RLLwze+a6QpX0p3w= =veq6 -----END PGP SIGNATURE-----