-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz 96f7622860b6df566f68fa4dc7cd2522f0882719421b548be33912c62c0e4c52 debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz $ sha512sum debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz 18a9d5938ca581b4707fba49519d78e4d8e1fef47f46bc4e57d122d35f1ae44c9eb37c2ad615b668d7b823453e82f93cdbaacd685f06a50950dc5958b1f08d52 debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz.hash debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz.hash debian-11-turnkey-nextcloud_17.2-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQr0eYACgkQHkh6RjHW /rbp6A//aYN0aF453xVFc3P1wbBcIX3FBP4dXWy3aadN3lwhhavkq01foQ05B2sx tF9sSVuxjAv3QJCkinixRu559USvv3TN4vJVJStMFGKBURqYPYWhdKHH0SDbxsYv 561tbxLHdmrC8xUri+VTlAQXHQeZkEfs3IX8FQg4epMUyYZHo9f24w/rK1EOSRHT RsfpYUG5Lfqls2RZ+aKrrxjQ4+hUmN14sLtzf0Pg0HEYM8KvSRISg4/ky34gA2sZ XrZBRXJ+JUXXHVyEQFinsZrNbBryOAkJCWION0RV5qVAq0e54LQ3TwNsY0oKzE1a RX0tRfUgRuLuVgkJ8Eqadzzz6KXDYIWmGXMmBYWO4XpGUvi9Na0qDe5KcqNEIgVe TwpdvSm+Cppb8c9Niuzu+6TpOm81j5AbE6F7diAP6u5PM1e+YC67k1CTBfk1ItJW a8wZBdE0Aqt9FnBKsfwYM4pjEhva9D7V9r3qwJIlFSYqjD0r9zGvuOj8eKQ6HgQm ci24B/Z3EozclM8Rc00AxTUIRcAjZy6HEgK7kFTpGbWN/NGsLbmgLjrjcvfaB92r lrv4ACfFINfJihuO+copWyRI0TY3NYHsPKTrVZzkabgX9tffXdJVPuwn8aGEuPHG iKtw+BwPVVZc5eFT/B/JduKQfnOkn+28n3yhQ0OqzvWiH6rAmDg= =T6Rk -----END PGP SIGNATURE-----