-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-lapp-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-lapp-17.1-bullseye-amd64.iso bccbe2e79f2f0f4dd216c9570b041c1fc734a0f45da3b4fdb429891febaedce4 turnkey-lapp-17.1-bullseye-amd64.iso $ sha512sum turnkey-lapp-17.1-bullseye-amd64.iso 579399c132f741deee73cea5b91c0bcd7275c710125033eb69abef6d90f4a2df476a13c432c36e5794340c578e9c50440f90e94e7855cb3ff1ad2ea532d85eb0 turnkey-lapp-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-lapp-17.1-bullseye-amd64.iso.hash turnkey-lapp-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-lapp-17.1-bullseye-amd64.iso.hash turnkey-lapp-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTsACgkQHkh6RjHW /rardBAAq+Yv8+intSmKsrN76RhoW9RMX+pUSfrpxQMCYNZRElC/nuuf0KpsjkP8 ogVyOrzbXaJf3aIcNniL5jgH0YuuY53zuVEaa/YLQVsRM9q87HHes9BWkh8V6HXm Ecw0krG8Hm3h2DgTvudjIR7wmI86Vu+xCqfOPe/ZPPCwIUzKdHmnw8Q4ujQcLVIY B2EWaqTlbpBq7zAfBnaRjlRTQo+uIkEIamS1Ued+DNpZX3pMTCdu/V4yRxa59aop I0CZoOCHsmKaI72nwT3jOxVjpigJw4gAgirxRjU/roEY7mTfpy/40htoFeflsks0 2F0/qHFDgqvUJ7t5W53RrkwieggBMJw++FhEZxceCPUG5dxgpETBLPBYRE49xQY7 Djylw4ka2+YDzPlxoqb3jwtj3H03Vii/8ahTT3Cb7O7xosb4dW/ldrb1/nbEWanO oG3QnSwfFlyteok2HLHg4tkZqySa8ylzRKuitIe9TL8vq7BBPcO2SOFuogfIaLRL rrhM4Ki1pRtWrCBZpf5FnJFISR7LtqxNGO7l3CZ5bJFQGvBVtXTFs4hBqdhX3TtA pW5TF3rzwdSNwFhPljhmntuYyT7BjCXS0e2y20El/ziBEOfOjeKjMLedj6bbd1ty j5sLrautGEhXR2vWMrqluQDZ3+REeebtFYGX/Tp+cx/DvzGqsqo= =qBPb -----END PGP SIGNATURE-----