-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify debian-10-turnkey-redis_16.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-10-turnkey-redis_16.0-1_amd64.tar.gz 0e65b9d9ca7df34e73de9a422d0ec2840555090e411876185f1de0565e6009ab debian-10-turnkey-redis_16.0-1_amd64.tar.gz $ sha512sum debian-10-turnkey-redis_16.0-1_amd64.tar.gz 414fdaf260271820dff6aa4a8ffe80fa3be1d859fbdce060010e1ad3c4a40915efca9a8debe04d3f19d0c08a2400f4a8e5fd9a633868b270de0d0e3672751769 debian-10-turnkey-redis_16.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-10-turnkey-redis_16.0-1_amd64.tar.gz.hash debian-10-turnkey-redis_16.0-1_amd64.tar.gz: OK $ sha512sum -c debian-10-turnkey-redis_16.0-1_amd64.tar.gz.hash debian-10-turnkey-redis_16.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl8Bl5YACgkQrF6wBJPl vByEKQ//XT9J+OILUQZ2IDtB6jST3tFYAxwkeHGD6tv6+f8kp2Ihw0UBDjWtyZl7 ZLaoldKPwgs8OQu3kqNXaNKV/E+gRczvtnpjF4S166qY0AYJy423/387/mmJ7ioS uJuD71bUzWiXFFK47u8BzaTW91orbr+SGx8jYAqzoD6vr/DUfCLRLvkxsHYJeoBD SmaSKAZ8xgD6dtgVTccZqfkdtqjQjOCDGnL2GtYHTKCuFMphyM3BNJGa4XvNVPtz 8GVTyVo3n/wdqgPRuPvyAG6TeKNPi3vNTRCIDG3EQ7D5NGpTqbpBYhpgiKr/WVEK aTF2nGBEqEhxyB+l9GHpm8ovKd+C2am9vRdJBrDUqBVMA0qQQAWJIRibbF+m5+vD Edw+aBfJd/WiE1Gf7txsR5ayML+Y6FRwi9MBx7uFVajbMxCsAZbAXmIxm52wKMwS GOPYVtftYbtzDot+cUzqIqLCMe7w2Hs5ynObsLbWIJP8dBqqq66Ptr80l2TmShr9 AKVsuxPGljaH1tWLViCUZOKYiWFTxGeNdrnIzyIc3LNBRel8HxBq/eEHl7gQRS2d jWHl5WZsAV8t982oKRqtzESlFGQ1b6/tqJ/y+Ka5RDb/sSkpggC1lvJQFcmW0XGM 4GuafyohQhmDTC4CWCXdCboVZmTuXIrU5NtzI+FXTCuMUekZX/E= =4h0q -----END PGP SIGNATURE-----