-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz 5e0f060a343aef459daed98d2c3cb3e04b7a8e2cc3ad387bbd6401068c843dee debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz 13c6887a5a32283f7edc7779cfa01a217509f8f47f216ee42a4fd40f0dbc3db3e06479916f668a2321586485ace6020399156b3decfad7d8e2462af127f9963c debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz.hash debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz.hash debian-11-turnkey-bookstack_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTEACgkQHkh6RjHW /ravMBAAj0Ryr8lN+qR4gMHgBz3HHUqsi8vWoNd7e+kA8qH238MIqr3UDaiZH3Tn tCznolV1sDzNa4uY9Kqz/ZPXWHtIJ4QBGvE9SFkQWjW1IYx9BidQSW4PgKDpP87N w+k76BWyAxcC2r2plzUzpIUkY5PsiBeNigokMRCbkDsCG46RpGDZv1ISbYsOPiK6 vulwlYCrUYNkxfExLfZDL4xzMocTLWuDOiQTFjQSWZF5NLopEOEHmPjYSASgcpc1 2/dsTDVaFiI6P8kwA+iIzzkOKiAkfVGB6G4B4BzER0G4TEAF43rsFt9QOJXfuLEz Qg6x/YPQIenJwcpV5qDU63lQub7lBSrJpu1S0fTdYp6qflxwenOGRDhoSFT5rJvR 0nO7Ggva7MlUO6PXnd0zGOyD+Nj7lQQl4vIFkjUcIeQpRsQd7+iE+6jSk3u3oO51 6wvBDV3Wt1q0L2kZCe7cD0ZWaxgwLJWXdOCcGZmlGHyIx3TYm6f6cfu09FUm0d7M H2RtzgLLBVABWcOcZKiJo8Vc/phRZXg8mnjav0aOJlXlHieTc1HwtbwxJe+M0TTZ 0qKLaq/RAFTvGm1T3BIwkvzMcgZxJuCK4H9H0VFBKJ4z0edwVWWBZw0hE6Lqrb2E Y9fg4yLQ7MnvvhRAAPl5OWOoZ6PfA4W7ozqy4baHGmYrWei3e50= =JEun -----END PGP SIGNATURE-----