-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-simplemachines-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-simplemachines-17.1-bullseye-amd64.iso 6ce474433792ac2486defe690014b57f1caac9fa331d2898757d183ff08c4911 turnkey-simplemachines-17.1-bullseye-amd64.iso $ sha512sum turnkey-simplemachines-17.1-bullseye-amd64.iso c7bdb77e492c2a34edd4650bdb46e742ae9f301f0b9b7266fb9190d9cb7834e7cec24c0d4ec03b8f916d0b33c839b70ef2e2fe58c048fd8a562a8175fc59486c turnkey-simplemachines-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-simplemachines-17.1-bullseye-amd64.iso.hash turnkey-simplemachines-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-simplemachines-17.1-bullseye-amd64.iso.hash turnkey-simplemachines-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTwACgkQHkh6RjHW /rb4Wg//c3puQ8uOJkAGklhbJBGGfiUmXRpt7rq3bgoWftpKkiRvn4I6t2HJRwJP HQLDclLlCHkORXXauxIu6a40bMz2Ko0W/VQYaFHTJtroGI6knekC1bkx8f6VITaC 4cVOJucriKWEnA6vO1J8OPaTKH92czQ2u3PrlEUh3MJA3JW6dEd+HeXVRFqLQmRg BWwf6twA2ToaGpAiJiXfxNKZyirZ7GdVUaASeEEOx0TI0bIxnWp0cYhGnaaQ0Ntg pT2eVQWRRJjc4+u4Om8KTV7PeZ93aAxmfZdmGEvh9oyNMxGK+MShzrfIXNXxw+av dRpsT1+yppkgKyK1BDpi14Ke97viNq8A4SW/rvg9iSMWTMpYER9EjSLF/qDczIlD i8bjLV0xrFWV5co+QO0KkToBdJRfsgjS10SfWHNMS8gA8MPgc/SccFGJ50mA5mMd qw7nWjHmukG1EXGKpCVUQrOpLWMRxNYS5ORBVd/9HWBv41ubJQVYVLN7Uird0AbI MFa6T3hkgm10d1MghQwFYVyiAeW+LLtDzU9qoa7yjv51jVijoc0fDpNsC6jWXERT DPZ+rIJVY7DGoNBoy00GyWyYEqyMBPCNBasx7fFPUhM2fKfDYRwm09jLc8Mdaq7I gnznZxeC0q9r9wAd8N6Vo/ydZRC7qDHj8UfxMbuvYkvCkm0Ao+4= =YfxY -----END PGP SIGNATURE-----