-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz
      f655eb0946c5ab5641fca950c3271a55d389dc8e07f55174f2e3551a1c869bb3  debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz

    $ sha512sum debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz
      320b2a5d88f81e597c2870ca336c67cc38e87266c0a847c42fa4644900bdc935775195b19903b64f7c55012a3bcdf385923593f20afdad4ef26155b0a399f836  debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz.hash
      debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz: OK

    $ sha512sum -c debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz.hash
      debian-9-turnkey-bugzilla_15.2-1_amd64.tar.gz: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlyZ3PIACgkQhcJelaFu
uU2cigf/UYTX+vesDRblw8gKVssi9j0f3nbLC8cQ+ughg8hEbhcWxHADABZNWvKw
ecZ5bZVGKMegVeCzHtYysgnWYl7XSxK3Daus3PD8mTAhivgDSe2gDvZYlWkmo6Xc
CZBJaNky/iArXCoCde+I0/XJnMgrzwHUQv+6ZCfnOmrWi2rKP5m0BlYsCXPUcdH2
LypNrn684lStz6wZxbto3b00QFPCqPCBRbvNeN7+GiY1uzkQwXAAjC5A7miFc969
uLlsw/YA49ChVqHaQJj+ixBRE3wQqdhWJcTjYM7dcWJ8cT6fBh0JhZqJOR76dyMV
PPtG9+qlbEDJ9Zv2HvE2R4VUcKm6Qw==
=BLk2
-----END PGP SIGNATURE-----