-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-sahana-eden-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-sahana-eden-17.1-bullseye-amd64.iso f05da3ca3803880cea1cfe22e29b32b1cf9b124f304f4a13216622b5e7a16469 turnkey-sahana-eden-17.1-bullseye-amd64.iso $ sha512sum turnkey-sahana-eden-17.1-bullseye-amd64.iso 4e9fe731485b11cc7b66ef05712bb655a8e9d92f37d8be02b09985f485fa9d98fda0d1a375e37cc042d47fa670a426e09e9b0320a2684ca907e9b712eb428650 turnkey-sahana-eden-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-sahana-eden-17.1-bullseye-amd64.iso.hash turnkey-sahana-eden-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-sahana-eden-17.1-bullseye-amd64.iso.hash turnkey-sahana-eden-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmOccf4ACgkQHkh6RjHW /rbjWA/9F8LJG6RNabCHWbYSJ5UX4W7yMIo2w+EcWJmgWHzvFb4fI2qjLKOBEno1 aeJHC4q5CdVJErTixxZcQKIpIt7A5tocLlbCzgcQX0TwsCDKraXGLgxzCj3JQngj 06+md+BPbkerwOUcBgeuJucmmf5iK0eaqCaEyPFAjsms4NyGCeu1UoUq6yUEq0aB gELYa7udJViTWnzIIKw42s+HDWuYXMVb8PxG4MZ+UpWEBdFGpth1MIEM4eBgbsq4 XoQXN/M5laJ7ERSgj7/s1jU/mHpq8xffVTA9WrKJrN+WjOWkltxDT1SqT6GwL9Hw 57YjnxCCb6nzkoba+E0TKsjWw8W2Y+QLbTtaHfYyNo3NJArKWJQpm7r5sEPTXcxe /yq9IuSXDDmBTKZTeNmNxEsSVWpSz/VBdxdGzfP1PTbEKU5IUCcYCGM3pmn3/lJi 2A5rd9WefGC6yseDIcufwj0YHC8UHsGrBst3jwShteM9LNBL8FYG8fQ02qtw/j1M YDBrsfbu3OT4/qFlEZBp29ITEEg89AMQysAGwlmsaY3sd02OpYhbwi0GFP3K/Q5O rY1YTW3qxi1FDMhionyRf3u8CxzygyX1S0tL71ARBKLVgM3fcV9JhRkfKl3Zstga iegutdUTnOXbZBRMTktT6StVQrSIGqt4G55LzCy8no82yyu+90o= =kGDV -----END PGP SIGNATURE-----