-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-leantime-17.2-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-leantime-17.2-bullseye-amd64.iso 81ec0e6411c3603ce82d0fcc14635e8767d972deb96fd7a7c505e763d1948174 turnkey-leantime-17.2-bullseye-amd64.iso $ sha512sum turnkey-leantime-17.2-bullseye-amd64.iso db9e7b6bc86047117bd8fa7fe0eca3db5a7297421b543414a6de9e498a9fb3a615c3cd4d25c4e88af3a2aaaa9e71f5df4a518dfd5c77d17d60bd87519101e19b turnkey-leantime-17.2-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-leantime-17.2-bullseye-amd64.iso.hash turnkey-leantime-17.2-bullseye-amd64.iso: OK $ sha512sum -c turnkey-leantime-17.2-bullseye-amd64.iso.hash turnkey-leantime-17.2-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmOccf4ACgkQHkh6RjHW /rYvDw//WdjozPeg+copBbj+deXgk9Ceja1J0yZV0nRUg5/LfOu56QbmFmwMDO61 A8kVO7I/A6+EkVpNJGgJF1WE5kr5IUdFTuZgbeqHx9+QtKGlPar71YwHTDsQr8c5 6vVL+PN8gUnICu22qvcufnP97MkW54T+jpVLVdDKh8yn2cTq1p5gurdM3cCdja5e iHG9E1Pqv9y4ckULQBtiOzVyAEXZEvOde2YmmJS/Ffz+rfQR5MnpkGknuUU/OBXD SJpEyovhNzZiN4UTZSrIlhJ8D2AVWdyUIGtMaoYJQxuk39Jg0M5hflcw56F7e5P9 M1HlLE3AibpOTb/zBK8IFk18xPp6kzCXkBVwj7SBpv9zJBoyVNWnS0ac7wXjLhna Y2uEP1AShsAAJPXlXocFYgwU0SLjrIkPSsFvKQFc/EDa4DOMdhqL6zaUmA5tYrE2 5rhr8n39XKGFP9db1o8DFS/13fWauj8svXODa56nNOF5Hxwo3stXOCF0PSc1rTSO 3FfOxGCJ6T/wCnmc++b0NjmERQagK0AHdUMaVZLhtMkdRO/4fusuLkYo2bOJukOM /JcM9GBGJ/1F0kX2Ua1f1tHGVp2S4K1EKvyG4o9dJ4MSAEtRGMRevcJgKPDmV34Q JFge8BJ4+Ebrhlo/gbP6Sa/Cgrn2Tv+jYAdsPndSFJox65F8BDI= =i0CK -----END PGP SIGNATURE-----