-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz 7a76df66e9accbbf3794e714626cd9f440806d8bddacab1320a1dd69bf943670 debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz $ sha512sum debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz f25d5fc9f36f7c3656f218630402febf760b08b87b1a56675662a26379952d941b92e2ff8e8ed17191cacf50d83b40a0d7d910edfc20471bb5954464a143fce9 debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz.hash debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz: OK $ sha512sum -c debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz.hash debian-10-turnkey-gameserver_16.2-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmGHrfMACgkQrF6wBJPl vBwc6BAArE5v8jL3G1VNysi3msZDj+xHWfqeGDnFXddV7IyOBUqMKKAxbsJ8xhj8 us2IDouF2xB0FPtrK29l9D8P38rTD3sgzKPkNPKdmdBCo/itA5KM+9v+z8sowxcK /SD/Sjk0/eSAOegbKYfHepE+0RT5oitW1P9K2e7fdgCVc8rGLZxmSCzCyXb9c/WC afQNWhgVlrR3lkIjGfnvaQWdzGk9IeVeEZPjCaqFyfUcQVaY5l7d1cJ67gcDPL6B XhMD25zUrElPr8yQkTkGrsJjYNTk8+NGMO+nSnJGbUqxpmUws/KXBKHQuKLeUYdC IG9t93lHESiFsFMD4zPlVqraGUpw/q6AqPhN92g8iqHBd1e3NbZIpPPZBWP0tE30 xO/ZF6q8sNS0eg++SjKHPxJsM4MFTN+RyPAHaEg1Vr2AtbuLGtulfuCyLsiGRKGV 8CuSkrOg+/PibxL34L4MsVTsp78l6hkvoR/jQQImHDa0fVx3w/vSLJU6tx49G/X+ 62Uwqx+g2ZD4el3LRdkKM1+h+nmoUvPbm7C2wpX5jQ6xjz6WpULSYY/lDXQbNvFg eL5DXCz8lJx6UtvQCLqEWf4j2QBvF9mU58Su5stSvTcFlqCHtP4D/p8D0p2+0FiC Nyi/eyOGWWWs9T2HR7bsCcm7PwraCfyABQ2eD2jgjUWWVEjfTYk= =65Cf -----END PGP SIGNATURE-----