-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl  | gpg --import
    $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org
      pub   rsa4096 2021-08-04 [SC] [expires: 2041-07-30]
            E10F 6567 0C8E BE42 ED0C  3A49 CCA5 1174 468F 9073
      uid           [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) <release-bullseye-images@turnkeylinux.org>
      sub   rsa4096 2021-08-04 [S] [expires: 2041-07-30]
      
    $ gpg --verify debian-11-turnkey-canvas_17.1-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-11-turnkey-canvas_17.1-1_amd64.tar.gz
      7232bc5c26a3ad381e1d72d9f2a83dcfb3ed8f3414af7daea5c87f1de1f1e922  debian-11-turnkey-canvas_17.1-1_amd64.tar.gz

    $ sha512sum debian-11-turnkey-canvas_17.1-1_amd64.tar.gz
      e047213425921c25dacd6a15eeda62e5e5c51b76915675138786c7ce7b8e3d1ab5dca5cb176be3a90ccfc8edbdf4432e5479f9af3576971c1980d502258622c6  debian-11-turnkey-canvas_17.1-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-11-turnkey-canvas_17.1-1_amd64.tar.gz.hash
      debian-11-turnkey-canvas_17.1-1_amd64.tar.gz: OK

    $ sha512sum -c debian-11-turnkey-canvas_17.1-1_amd64.tar.gz.hash
      debian-11-turnkey-canvas_17.1-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=tL9x
-----END PGP SIGNATURE-----