-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-tkldev-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-tkldev-17.0-bullseye-amd64.iso de3318f21ecfc5f80cce56d18debc81c64118385903393b57d5abbb065e2c52c turnkey-tkldev-17.0-bullseye-amd64.iso $ sha512sum turnkey-tkldev-17.0-bullseye-amd64.iso 784470f8cabeab72a005312b4a0257b078703b4fcde3b88913e2ad17a233065beee9393f7799f413da4aebd8763f42a16b8bbc35a99002d152bd52d438e1014b turnkey-tkldev-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-tkldev-17.0-bullseye-amd64.iso.hash turnkey-tkldev-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-tkldev-17.0-bullseye-amd64.iso.hash turnkey-tkldev-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJSo0sACgkQHkh6RjHW /rZZmRAAqN8bIJ7mylA8bIjO75ItMSAIxlTHDrHrq4tTWl2IbRWfIR4RUAAcVDEf /CPQXgo97juvxk0jkz/l0DDlwcMkjwZEJFrXvwAqhoxhvw44MHBY4nHZP+NFFZ5p GP3sYcx7CpJzbLG+EbS8UbrODHIKEUnFfU6ybm4gSYluiYTYzNqoTDtXrTo/FsIc AiVOpJMXlwwMJPJSZzfNSxJGKZy/JbwjC8ocmh89SjPVjY/SJRyG84pXi29vCaQw iY0Ao8ycvENPx7778xQ23A461PfuaNRUYdYaR//oAYmI6NQxQKF5LST5q3JhMbvc i28jqmj8HnXQ9m269vI1GykID4/0gZopb3ZfVwqW3JW2SZlI9DRouCzpqok43ZEw VPAnN3uBMGSml2GF0hXuAoak/uhRB7g5grdTQ88qQvGkZ7DDmjbCfYLPzy9zzmAa lNUxxY0aANeVBb73UvvqXSiHVmA5JHyCdqCiaQmpWDFvQyzjb5in35IYL7aIJGJ0 1+DU2WQcjQJHBBUc2ZZbxwicStbq6G2tHKmuuNQhNcZb2GQjqZHFSGRMaHwG0HQb p+JwRWP+GIqLqGUNTfIwX/drTb+o/xoBHKXH3M+cixnGChZkdl2PASA19ITSkTmm FgUYjRYPC26kdhQx2Ocyx0gY7vGFti9efAhcvPorN3vBJTGbUMg= =H68j -----END PGP SIGNATURE-----