-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify debian-12-turnkey-avideo_18.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-12-turnkey-avideo_18.1-1_amd64.tar.gz 66cbf7417e805fd827a5f06b3f76c777e7814102eebace7c308722b3660a0494 debian-12-turnkey-avideo_18.1-1_amd64.tar.gz $ sha512sum debian-12-turnkey-avideo_18.1-1_amd64.tar.gz 5a153119cb7af85e593a8fca67ae6b31f3f6fd11ce075d586f52c2e90b73e152ea6b05a6d9e90fb5b76289da55dd4eeef1df14920441c6a08b202e773e275a5a debian-12-turnkey-avideo_18.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-12-turnkey-avideo_18.1-1_amd64.tar.gz.hash debian-12-turnkey-avideo_18.1-1_amd64.tar.gz: OK $ sha512sum -c debian-12-turnkey-avideo_18.1-1_amd64.tar.gz.hash debian-12-turnkey-avideo_18.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmX2s9wACgkQkPLGHN5q 3jeO0g/9EqAmIDl5wvgX2fhY1GUkRWYfYQYGb1TnkhJMLlff/NIDaT2AbDidcHzl 2Nb9pHtmY9PRy2S5TeV89BosojYPvOkGDI1sKtdogWdle6LmEbVXJxiI9cHJmlGO h6oscUmW6b2NP+B7ErCJQDTTvfw8Z45OsPrmMMRB765bRJ9BjvSa31+jcqTs+vBE jnaze/Ec8JiJkrHmoSZizS2zCNTZi6+KBdva6p0+35PmXFi3B/XIbf8qFqwobDbs 7pwJmW587U86tH9gLDRjWTm8pT4kkQ5ZA/DYEbgcpwdKHJheKCAtniJUzxtZxwko ihVCJo+ZI8xdIdA9WlztVAHsXy7nCrtPosVeS86tQGreYIBNhWsi43/EHZKZUvj2 +BBpKOZcPD9YkLKavdM4gYEZ0/ewNgM2Jhkcseit83L5EjOBusfR2klzq4jPtcOP woxnQTpduxwdAfq4+ucBrj+pmN5ZYfzM1//ruLLTY/dZ7yLi7klwh3bJVUwnU4fC BnzjL80wyjH5VQI6+0kTMH6vCz2uwfhBpkMznc//gVMxg4J93sh1KNa/d7/lDCXD 30VCXiJoooiGKnvV+ZXZEAdh254sKELBXrzDMmAzKNkanyfK/Odp86DniRvdbTCi mSXjLPj7TmQ0C+PPa5cUQSX/44pyMgs4WnSr741DgN632z6xyFc= =sIcq -----END PGP SIGNATURE-----