-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-observium-17.2-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-observium-17.2-bullseye-amd64.iso a6086b50ad2c9b8c5d36121315ae6a835ad4513401ca468230c6821381ea514b turnkey-observium-17.2-bullseye-amd64.iso $ sha512sum turnkey-observium-17.2-bullseye-amd64.iso e65cf852f3a51d4ad6e874c822012d5675993f7520915201a2c845ca514cf31e07f4cfa4755fa7d41fb13b52872592f4da4142822b8d685d31ba40b33254d009 turnkey-observium-17.2-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-observium-17.2-bullseye-amd64.iso.hash turnkey-observium-17.2-bullseye-amd64.iso: OK $ sha512sum -c turnkey-observium-17.2-bullseye-amd64.iso.hash turnkey-observium-17.2-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSQACgkQHkh6RjHW /rZpihAAiZFJc8g5ZSXbhRvv6ucrrQN4V2tmR5SicNyQ/jUSa3KJ0XZy3XienvUa 7bl2She/7yI70/kgjjqrgWLo9qKL27IkHxoS+L1kYsqKa/3Ud0KyCZggcuoSV32Y ZGR9gqWyGjEwO6yyjEC9WOBhlko6n38t8eMHjJqwPRkY7u8EZTewGNExu3QeR+7M Wj59lxo8ZvSvHEbnwBce+Ib/dt7PX0AGWSXuk2KQnjF9jFp+OIeQe4ml4H+5MAD0 9MY0bppgdLN3/C8efWz+UpDnVeRXX+zG1mUTXM+5iPwyc008n1yDJ35PMqWE7uii M6KeJjwJTCzJUWQ3ZLMYAL/G3Ji6P1TQMgNjeQ8KZ4V2szLxUlsOsQTshzWVFm9C Qn2Ik2gJWdVUREMdRe3eSc3JiL00wVhFI4BdcTme2Rb682qJBREIw0wu2glnn2ig X6kziQTWArIz645/VqTS99PqD113TPGiFa/H8MgIn/7tXhFo4Nx/xSwwzA7aKpR7 Y0JR1V/pOBl/DTXNe4o4AH2exi3HxObB+OHnmdxVqJRFXVivPB0NNWyyMTpij6zH ghzfKwRhSWhHiKv/6qP62CPCPash/+jM/z0tVeQekb4/tByJ2plHCpOAAlynQZoL Z45j0bauqE81iUy/3VjKQ2mPqUw1ojtOWOib3Wxz242C4BNpJXg= =V9im -----END PGP SIGNATURE-----