-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz 9848e2d875041cc1a0f0f0b2c0987ec55680c26a1862bd96c867932de8771442 debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz 2d6ce211a56629eaf71452a8695b9f994cb4ed140fc2f59a88b6acdc3cdd6cf471a0c1d4cca8b5b646290b893052e3c2c5411a5584af153264cf0be6b0168da6 debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz.hash debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz.hash debian-11-turnkey-snipe-it_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmNx+zQACgkQHkh6RjHW /rb5uQ/+OJgWG2I7idW5gjkFAf7BxxAz1cQSC5fQKc12ZFtrY5vLHlfAzuo8CjZz C+KROB/C57qeOHeITE0QDxciBXoqAyhvN8//Pnlr92qrMyT9W5h9PG0AduTvDt8s bSVUzFL3QIxUxz6aT0QRsFLE48+kUpGm3Zqwf9CTDf739GEX5U4XkIEJ1qIKqfY8 HwWtARkuZRCjezi2toSZ6HMRnGEp+3hM1kESd2A4hnK8M4xkMqPOZ3Ik+V0B/5J4 7LKY+wPhtRPbnJtvyg3Q8NQ6KohMIar3M7/YJjsNWOHGhUQWK0A57WuGxU4/MTIq eP2Qj9bs+LL+h4SfC7HtxX6boPVRTQWMcNbuw9srrhS6M7Bnwi7f5PzuBLntyVza a+uC7PsyCjrLys5jpcVfdkSNb2/m/9jSj00X2Q7AGK0FZwleGw5cOfa4t+1HQo2p kfvFGXLecXp9Lbi0MQWQfFP/GuD43q/A3Ta9jjVq3qBwZpEyv5e8QjVhzT4OuWMh RgOcHWtsuS9iLpDeneS4spDWT71AJqOSa22XVuQ/+xqSkxoJiVHtPh568F9wvbma qrCuL36lrhRxZPVVMRYiw309flsr3VjemxsX23PesnwmuqqGOV+5Yd8/GI/3lgqT ho72YUkStdWkIo+QNA3cSoblUQmmo/eGx81ch6V9qp+USaFEg8M= =KQgF -----END PGP SIGNATURE-----