-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-yiiframework-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-yiiframework-17.1-bullseye-amd64.iso 5d88a3a63db060bd9016edb88ef74380f1087ce49ab19936240057ef4f359321 turnkey-yiiframework-17.1-bullseye-amd64.iso $ sha512sum turnkey-yiiframework-17.1-bullseye-amd64.iso 8877f6a2e0567599478ecafafed5462f10a763d4d355c272226b34fe0a4c08704702e2e25156d2932b5b5dfa74dafa11a81a3c7034209c25481e1984423e830e turnkey-yiiframework-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-yiiframework-17.1-bullseye-amd64.iso.hash turnkey-yiiframework-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-yiiframework-17.1-bullseye-amd64.iso.hash turnkey-yiiframework-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CT0ACgkQHkh6RjHW /rakhBAAiGvy/np195dU0G7fdEzdwe+r+dh0l+Ex+jwJWM4pWwSv6g/GHjZCU2+k pexs6frHEBmI9f5dd1Br1UjDCRe+LQwmpLG34h/0xQMDk0G3w4BXjt3fGxA7Tn4V ANfpWU9VaIiej5NgreIfomm2Fd3UUCzAUWXsx2NdCZX3je+bCI3tzzApdZi/qsJS U+PALzhPDML3pfQIWWp3d+iyYEmYfbF8rQyFdTtSdGPZLrMTaxBnJMJiHjzgzxj/ pJruX3AnayiXtMG+xUQotFJf4mZvNIqm3v5wNB/nCUIf4J3D9hFTFf0IuN/oVsPB qpjHt12KRxjlu8j2Spyp4s8FuCDkZEgmbipepqoxtTAQmVF/s5zp8pSA7mGiFh/l 8n07AKWkeDIze8PLsQIZc5eeGr4pFgRKb20nj/qUdUm2Rv+AAGQZ8/j6Nlfp75Ts pAXu/9Zd6Lg4M2d+ON56UkhPWinioqonSt++BB0bs/3Zi5zRmFwu/f6K8gmc7H+1 HPrGq5VBLIA6k2mAHZq6eeeTJIga35QrV7p7l/2f5OBZl7rGc9Lm0D1wDauPP1pU DfoO55KaloOhXt2rnh1iR7LVgXnAH+P0ZSI6/hFPCI6r6bjlG6zfrvSE1kJEUHcb qv49DleJwytBbptbeZDlFy8ZY5zmpZpgtJPCK6kTqsDfeFzFgN4= =QTwD -----END PGP SIGNATURE-----