-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-plone_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-plone_17.1-1_amd64.tar.gz 2bc31181d0ec382de82c474e4e6751bb3264864eff4224afba769469f934e307 debian-11-turnkey-plone_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-plone_17.1-1_amd64.tar.gz 98b92d0a32fdfb1c4c458c5697b6d162b67b21a9c355c5822139950913f1795691d7dec3e332f98321a2a99d0f7b4579055d1923a00767eb44b366c75e693a0c debian-11-turnkey-plone_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-plone_17.1-1_amd64.tar.gz.hash debian-11-turnkey-plone_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-plone_17.1-1_amd64.tar.gz.hash debian-11-turnkey-plone_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSEACgkQHkh6RjHW /rZuUQ/+MC8GIKLLSo75W0FraubFAi1tVd01XV9iLV4GWeGG5nPcvYieO5acS6Y3 p37dhhiidfUGObNLkhS9ZNZ1cugquqhfh9y/f1VzYIsOoBxsiCM3HIk6392+Qe/Q kki5xp3iFUOqyzk+lDMCtlwOZZdUbzRjp2RInu22+Td2ky6/C+uN/HO/s8KO5RCw /k7oO4ckrJuaBuivaEXZl9zDgTFSZqup79uY7jVYvs75FB2oFQa0xF6w5OLceZmX bYNJt/UXUZeqECEn2N35gyEPxr1OOpWkg+K2F7V7Vza7mfPQUo71JDgz33cOc9/O 8Zp76rR2ttRyjXqZyFTaUoiiAuYNGLt2FPlFiODAYsVU0FkT+gFBsmxPLbwa30zB PCgiUoGjNfYCacKQiJwVaTpUCzfjyM6wt2cFaoa/+LrnQ/ie8peTE8gSabAi+eep QGah7rwDkZglLe3U2c56x6Xc6p+JslFfUPQaCai72OXe4+dn0Rb4MOFdjQOwTDW+ 0vZgjqaOpSu+roZ/tJbB9b0D9I1wGIMRCAaJ5iaeyhYzTigKRQ9yheuqvkO7wg5v wIvCzTuAZVD7raPZnpxGa+nu+VotfmQZcsuphf8d3LKeWWzRP6n4t9jXLOR3CTd0 oDFD2dsjxjeyAaINivF4/W+UCIK/ftEbqvgJrYS3gwQ/n+JNKis= =SMNn -----END PGP SIGNATURE-----