-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-zoneminder-16.1-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-zoneminder-16.1-buster-amd64-vmdk.zip 3bf851f38803b50276bb75fc1b30b8fbdda966f5500c16b1499b84fe03f696c3 turnkey-zoneminder-16.1-buster-amd64-vmdk.zip $ sha512sum turnkey-zoneminder-16.1-buster-amd64-vmdk.zip 06eee3448703dff23700a6a73df9b1896f45a1ec8886de1177cfdfe3566cf41837ce714d67387c7ad69e4383bb06829ec400df503d4e174e5c419a8bdb69013e turnkey-zoneminder-16.1-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-zoneminder-16.1-buster-amd64-vmdk.zip.hash turnkey-zoneminder-16.1-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-zoneminder-16.1-buster-amd64-vmdk.zip.hash turnkey-zoneminder-16.1-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmB729YACgkQrF6wBJPl vBxr1g//fPGmaNoDn3jh+3p2zmrmRvO+sAUqDC8u1lW5s1zqWqXkOO4Ds1xQJuO5 ON7EifypREGwx1JVR9xetmq98bVZu0w2mxYXCA8r/HPaWHjb35cGdhhZpEtyx8G6 6OX6BiKcbCFkzaUmZilUu7qN0u62ALDxwNX2ghMl1j5OV7lWGIrxua2qwbdDPuIy vtcBCC1dGE3fv5u2Ttwhue/vK+e8JCxB5tGWYL/8m3gNJlXRVsuWRuGJmCIOELpb gdT6MpT81XYRBhu4QGOef4gdnGwt3Mz17z7Yk/OPg1h2KqkQTPhWH5tuT8h//JtW iIfD5YfwhVPnC8M+A1zXh4XQ061+dVTCSlKd4znpFHaBJand4DWYLolpizVVMNfI +z0vvGz2mBYlMfocDqyVa4b3q98Uaidjh+jwoigStv1z1ejXIujIfDv2YUaXDXys K9HnAaqZqPUpKks/RuXdeIJYpX4gtcodebD4cUJfTwGAkarF14NW436LilVD0/UO LmOCn1WiT6FPF/eEmzhzcc9Sq75xF5i0KjLpar3BRjAhDDuptU3qFYFRIS8uwpPQ nq0CdpBUpqe8XaWF2flay12RlPhxZ7AfE7LJm3k+uEkt5fug1HWMj1A8KZKUUMZw T0cHrgOJq6lc7p30b8qerSyvU81MMzCKLfzJROEkZ/baIqIeMvI= =3aFt -----END PGP SIGNATURE-----