-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import $ gpg --list-keys --with-fingerprint release@turnkeylinux.com pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D uid Turnkey Linux Release Key $ gpg --verify turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2.hash gpg: Signature made using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key " For extra credit you can validate the key's authenticity at: https://keybase.io/turnkeylinux 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2 ce46e6c85b6a9b0a2860e25d82970701c3c018465278889f722df13649ca12a4 turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2 $ sha512sum turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2 fe80c0ca9c3854d268230d9c534c2f774ad2d70e7cf8b64b223de8597b5dbb02193c88ac5ef374ecad944d498c1227ad10d5cbf84433d33aaea44130ef1ec7f1 turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2 Note, you can compare hashes automatically:: $ sha256sum -c turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2.hash turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2: OK $ sha512sum -c turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2.hash turnkey-phpbb-15.1-stretch-amd64-xen.tar.bz2: OK -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlv/pjEACgkQhcJelaFu uU27UAgA3QRVzu/vKJ19LwwYlF+CWyzv6UPS/YhKNgt3D+vLW1YyFFb6GdJR+SiJ /8CTJgtkux029ch/Mgc3sOHpf6cD8/EL0Tv0qvYv2iGe6hE7emM3fPVG7sxtQ1mo F4OcjWSomLg9KdhlBcH/ZmwluHQawI+Rm5O0jaV+8h+u4DTEIhQKmKzM+rODxgeG s4k4OZz0AiBwkmWmBuOREZfxuC3gEn5oBmaez25fHrCO0NCsA+0Zak2wl9rrAOS2 dxqkDJTFsmE0lehPOdgT3HOfjVs9/QqY6NRHSKC2bB1PiIFLPxDffS33BqH2m5KX PHzcRpsrjx1cOs8QWDOrpNpQQMra8g== =1+OE -----END PGP SIGNATURE-----