-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-postgresql-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-postgresql-17.1-bullseye-amd64.iso 9979d194446571c9a65ea0f2e01f723f938ba998fc8fff72aec9ec997004588b turnkey-postgresql-17.1-bullseye-amd64.iso $ sha512sum turnkey-postgresql-17.1-bullseye-amd64.iso eb11dda7cc9ef0a514e701351f66a48f40ecf65faaa7abeea9655e113e2f8260fb8309a1235cdcc227f25007c2d1726c176947f989e5e0ab276e4cf51a392a73 turnkey-postgresql-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-postgresql-17.1-bullseye-amd64.iso.hash turnkey-postgresql-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-postgresql-17.1-bullseye-amd64.iso.hash turnkey-postgresql-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmNx+zYACgkQHkh6RjHW /rZ6Uw/+KRu5yd3p5+Uvgi/y7X98DQdp6R4Bg7iLRjDDiAxRfRiKW1YQfjGJHvxE HUftR4VsNFQ4FeweLYtGtO1mjtDqm+lBwYMOq1G5XitkXwggcM+6pjEIxuoiTXqg Q1btr6MvLFQ3qGSvb58y7/UZl9LJPcX4FOpw7PEGkrM6Vd9Z6LsPdn9AJkbdiQIO U9YZeGeTecBnRd9V5K5Zs4C6DkeR1qJT7Z7TakCWqOL6krVrBb6Gjeic3GZ9MGVA gMTldyDGwyj6vWpzFJ8x3b4pvoFtnJlbarKwBEP8MQRSQxnc/xRaATQWtUJHpDCE WxOebZ9V6chkgbVppgwsoqxhaUWu/voSkG98VGx6zeaBv76eK6wLYOcLdljTUVfg R1fyUBN9j/PDBY98Ss++tPHXSjqPHRaMWNXQJjIC6WyecMOnIR455bVatzfSapzj /ayb0A40Hh70y3sE75t2Co3kOQtineEUI2NkusJxiVfkGftNYVEHHHjoH2MlGaU6 hKpTzMc7JUx0sHsh8f4JFh1mOmeW/RtXL+IQ7/UGlVSrLvXz08D4wylwZkDFxFlu cCL3yu9Nu99entSg+/nXx6bfAr4CusUIR27ahL1nuzkUQzBLPsVtznmWVL9ZhykF aqf7mmIiBcacur+dXYCGzbQpgPvGtsR+u7IaKzDlaJPvwdw6ZrU= =OasH -----END PGP SIGNATURE-----