-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-moodle-16.0-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-moodle-16.0-buster-amd64.iso 7717845f79f5cba4c188052c61eaa5e76004b7ab6664210dc3d96acb6eba4410 turnkey-moodle-16.0-buster-amd64.iso $ sha512sum turnkey-moodle-16.0-buster-amd64.iso 6e015abb04cfab5ba334c35d46be55f2f9375056a5d06449d837d30bc5838b5352ddbf680a391413e90129918bb605b18739e0206b91900e3bc1af26d3b15631 turnkey-moodle-16.0-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-moodle-16.0-buster-amd64.iso.hash turnkey-moodle-16.0-buster-amd64.iso: OK $ sha512sum -c turnkey-moodle-16.0-buster-amd64.iso.hash turnkey-moodle-16.0-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7vE5gACgkQrF6wBJPl vBy0oQ//RBbR8QrauYbqVs23bUgBRaapU9ERF2hCCYAsOdjSypQQA0mYpqtC1z1P DSA8liXVdvl83bz/tcjHwQ8x+E1RZiA9zDP4Tfuo0znV/VtqIWH/cvnmszz+CINk Wb09le3nLay/iWS1JqtnGrDzC05ACuYmFfUJwzGOBDDzWdztJBEO7YdyCvJNEd5i 69xWoIYNlHUG+mwsC4dbL1y/2AZmCCKO7ZKQhSFgHomNwrQn9JMkeJ74c8yKRlbd fSl9qw7RBNW8DXnlLSf+jcCkC/JYBx4kybwE6HMdg50zlxtMa82LP0G2Kc+Df1Xw gbVb6Tltx23nU0i+gX5vjwiD4jTAkUCvVDqYK5Hf0v3I3juK6M4lHXbqkVP1w0GD aEmbcBIDe2X83YkJHRGXCPxYwFlQFLHhBQ1nKa+mamYBLtXYrGnQIe9Yklcxdxn1 TKZJ3XsJBJKdIQYREMIylkWt2ifeZtLVwrAqAHJZmF+xPT3k7vZe5GD2o8uj+/XY ZEbXBVzHfoln599WNDFEQrtdMsFZG345/qZrUMvZDQ7GaC6Zh0WJCcsvg50fRfU8 vSttCuXo3xTf/JReQ9Clw0/g0Wpv8Tr1UKT0fbrhYxiOXGWnTpFekSZhocVmHzVy n9zRPfP16ec6419dIF2HHMISklIeVggbcm4MCUIxf0ls8rEkr6M= =lFK2 -----END PGP SIGNATURE-----