-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-faveo-helpdesk-16.1-buster-amd64.ova.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-faveo-helpdesk-16.1-buster-amd64.ova 2f7f161dea4c30a7339b020411bcb6a302bbcac65001ba5e04f4f23177a1b972 turnkey-faveo-helpdesk-16.1-buster-amd64.ova $ sha512sum turnkey-faveo-helpdesk-16.1-buster-amd64.ova 22b8e22043a5b712745d8fdcb16503494c43bea495deada83249edcb2b8d611432c3db3f4ec307f75c85ae5e3733ba5f220b832b5ebb0233612126ff91cfdee3 turnkey-faveo-helpdesk-16.1-buster-amd64.ova Note, you can compare hashes automatically:: $ sha256sum -c turnkey-faveo-helpdesk-16.1-buster-amd64.ova.hash turnkey-faveo-helpdesk-16.1-buster-amd64.ova: OK $ sha512sum -c turnkey-faveo-helpdesk-16.1-buster-amd64.ova.hash turnkey-faveo-helpdesk-16.1-buster-amd64.ova: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmCOURUACgkQrF6wBJPl vBy7fg/+M23Yk8SuO0WDcAa6Hmum5WUnDsnBOzjPBOAR19mbCx/iMZr1IAClj74s s6PovJIRk1V4Ywq3gtIak0Apyuomm0cqtXo8pD3yXxshOfN0rr6Zr2FtzL9mptKg PLoJzInRj8Iwwsv0YUcfg2T/vXN2ziCMC8OZcBCFk6NLixp336OGqveChrqR01Ys GigSAlc6CS1AmrGeddfIl+HSYY+PcY2I+s2sy9ChBjxuyO+QlQT25buzEAZHE53K 61WuhmmUR0naIfHlkjl6hqkuUvAITu9RXFDOkOiGTBm3P2Km2AbS9tmYghu0tTuT HXTyJr3yyIZOd/U+kjzH6ZGuwGWsqLuDyWJe99cfZbEsp3lhbcDSUrSWO4mDJiNW /imIYOQRNjTsOOUgKZOaANjiVqcuSkF8x3QSdWrvwBqVmjrIQdAk7ky0wO3vcuao FQgVmJJSVuIv134aqIX/oWpnhy5cUMoB/uDOfwKoO3YJ+HvGLEwhVAKif1YE2XbO gdyeaoncXm4bJ/kUlo3B+D5WAIMC/nxP4/YUd4ZfJCc4kFt8lxpXPpWXnoA6pzLw 9y98xfJHFsYA3sJXRJdKr3f5B96P++5hjsJjwjFeYwKtaPJCFAIJqZq+VigoI5WK ToTG9LW8eJvRA8T07KU328WdXT8ETTZjXF88okH8HzD0VPmH6Ho= =GybA -----END PGP SIGNATURE-----