-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-plone-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-plone-17.1-bullseye-amd64.iso 2101e8fd2f4f1fe4aacfd7d78282312605ff255a4b7633f4c0dc4082748fc927 turnkey-plone-17.1-bullseye-amd64.iso $ sha512sum turnkey-plone-17.1-bullseye-amd64.iso 3ceebeaf53e5c96cf7ff7343ee4c552b0de3c98e48cdea295055b3926f05999db83a07acbdaadfff86e2aae70746820d7b87634678d5cf130c28be92d2570bbd turnkey-plone-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-plone-17.1-bullseye-amd64.iso.hash turnkey-plone-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-plone-17.1-bullseye-amd64.iso.hash turnkey-plone-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSQACgkQHkh6RjHW /raI0w/7BhT4fnVDdLLcs9Qx9/cBnYJwKM2otoQvA9Qc9SYxEoaP8sCyhgF/Bh3e dPGe4ysxZthOawTVap98KhkVvtJLn9FpZCkubWt6gimtoQluktEnqG8nx9uRG0gV mMIlRfL1trj+jx+V/7MxOysDaPq5+5o8HEixx/rvbj33tV1CQs3lLgj+VQf64+dw yzNAO/fYEdJWDeCFoeVuvMpEE56PvTz20/6+YNeB6YH4SZZpbuw0nKJ50h0sQZ/p /WfmW53iFi210dWxtOSWd+LkxoIQopKmtVjs6n1GRnzBoFlkanwNmNwwSNd1uyWp Ad+cvbzeXSfQ34Rnew3PEX2KUrcA29CsCudU94xxVzZRV6BEphw3SqEzD+jBx/qh IHqLLVtElgorPGDkFBjNfnpP7NdwKERpMjUTN05TeY7cIWg/PXPnE/fT0b4i4SVp HUOxXN6sgwAR/06Xp9WPg1ae0dM1f1XbmtYUEkysiXdZRccftTQkWukvTYGmqT0X 6wrzOCByJ6ZW2cHr9yIJDxKzUz6A6qM2eymu5A1x1Lb10Uhe7eMVS+aGqs+0mxdg FrhvpP+HyFacNK4sQwQt45kZTlZpOVqrOiRzcfCbiLaDUGQRWzkmHMVvh2BeRnQk iDXoRoIG2t2QbCmW8MmWsYKYWUvsWnLKNVGYIyx6ifQGdC0Ckq8= =d/IQ -----END PGP SIGNATURE-----