-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-jenkins-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-jenkins-17.1-bullseye-amd64.iso 81bfc7485da7dc20c666d28fd5a3e59b7e49b323057cf6b53c26face4445295b turnkey-jenkins-17.1-bullseye-amd64.iso $ sha512sum turnkey-jenkins-17.1-bullseye-amd64.iso 285ab8466d4f1726ea6cbb840bd655bdbeb7229d2118ab0b18f9023dc098c8c54313631be434f126d3fe1268a2f89e46218d7305f75786f41a1dfc340fc5dc9f turnkey-jenkins-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-jenkins-17.1-bullseye-amd64.iso.hash turnkey-jenkins-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-jenkins-17.1-bullseye-amd64.iso.hash turnkey-jenkins-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmNx+zQACgkQHkh6RjHW /rZ5wQ/+LDpALOYydWPOg2oM3qC6fYy2IskjqiE+7itXyn2BOkw8FYkNelmzGF39 +t/cnTRTGPkZG+iXyCx2ZZixTyXCcbF3J+w8M7mGqnrsysn36RYJ4Nz64aZROXnV yZFc+jzta59M0yPT4uri3I58EkXi+XcnRdd+YONOVqHfEo13EC7J4X7+vtedtTXV WaddttB1E28H1W2XD/6cTiqLtcNNjPh9iM11G8BmzhQrlJUWmh5FSWTlx6ctbY4E zh6128KBJzseCEjQsGcVsg7ZJGPbQC3wxFzQ3UsFz6JxO7+09DmKfazxJ8GS2nj3 WA62FSWbw7UOOODwcBIww3m13a1mIovDoeBW2Kc02cp4Wo4ZrPR1SDHsc2qdNxdZ xQ55YOjhEuSp7CovRsI5z2AbVHuYD8XISstKlVny70dlEqHtw3pgfHRYdHT3HHUd Df/7jUB7Duswi5sAhSpD6kCjhdx5ab9AR/Qq6UbDF32CcALY0+p+98jP2XC3ez/R O63U2ADCWnk0dmHegfo724rQzrAel1ySn26lsyCklSguXKKtsaga16u8od1c8fE1 UUOVJR4tdJtJrp1omqxxzZQVJeAEj6XaU2qT7jVozz2hY+IjPTMPmeUYSVCHPWeR uWDMtaEppkYYTl+ttsHI7O2vOtgIiCVnwC398QhnF5Umzzsa3Vc= =Bp0O -----END PGP SIGNATURE-----