-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-leantime-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-leantime-17.1-bullseye-amd64.iso 6a73f95276b42d3b2c82bc90244bac5debcd6273112eaf689f7ac67ac4605888 turnkey-leantime-17.1-bullseye-amd64.iso $ sha512sum turnkey-leantime-17.1-bullseye-amd64.iso 3c8ec02b7cd4889f2884ca37c8e169dd8ca2865307758fb9c8ae28c93d7c43a126e9556df6e810736d1ab74723b92b9d52b71d36975ee20bb81309f7f2c027f5 turnkey-leantime-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-leantime-17.1-bullseye-amd64.iso.hash turnkey-leantime-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-leantime-17.1-bullseye-amd64.iso.hash turnkey-leantime-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/EACgkQHkh6RjHW /rY07Q/8D3BMSrcMEq2QrLpsOS8G4AFsLnREhVoOHtS/pvrt1/J0CAISf9px86MT oZRErAR7SgNsFZNNHopHrFaT+GiRjPjqKAFaE/zs+CDCu6O881VpGC5A5kO77EcG siatGPkoFzUp0E+g2YBt21tJAhyJTX3hgohdXBaq23kccHvG4A/yX9GOG/1UyD0+ z8wgqOT5eaINMlycpshChG6vliOLrMMnLae9DthUafq0+CfeTnkJm+KSB7z8I032 EL6mAEOcrvW/eNKv2ArjmtFKA/INQObm5mbWjar97kUstI2hx+cz0oLs7ympRSwb Rhw/HsMntVm1xsrKRGv85+Qla1yBmmKw+PeRoekOjW8l5pxITfxZn0iaQjUG+J/C cD88XfKtkDOWA7xKD6jqeBbT+qks56WUo5eRNUYIOFkJpus0EmS+r3Fxo5/U5pwh qohFLCWSB+thUbL7J/VsEPKrc+tC9Y+j9fq0ttFRtf5qPpOplbOcUMw8cW4/WmMl l3B1m9C1LbJLhkH20TltfSbmqYgRNmwfLvJi1gWzn6Kq02Phg4WacBZNEghdgHub pIK95d5QjlviB/OSfGQLdMEQeFyTEROE8NzD3xOmxIZgtkedUHNOE5BKr8987DN4 C3Xdaaa9qN/EH8dZN8YlPDOu2C6LkeLcDgRXuqdC6uc5bcZOzlM= =ofU+ -----END PGP SIGNATURE-----