-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip 304614e67fa9fab1ba1bb9172918d87ced3119d46204bada216a1625078c63e8 turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip $ sha512sum turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip 5ca53c5eb43e43ef734e42c9ef012d53e8073adafad4a95c760b7b976a16c70243105eab7c0d05db5e9821d84a3bc0bf67a5205443c7e9a81c8e86a636d49553 turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip Note, you can compare hashes automatically:: $ sha256sum -c turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip.hash turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip: OK $ sha512sum -c turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip.hash turnkey-dokuwiki-16.1-buster-amd64-vmdk.zip: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmA7b5UACgkQrF6wBJPl vBytqBAAlaBI2UaDUPCxxoqkPkcd85sPEH8aJJIoP+eglWK1nlJglyZeUTANN7Jp XrPKCF6jqkE45kWqhPx0QjookAzEX3+sFJPGNXiAfkdhVfcAwGZsIcFmNF0tH2TE Qp73cVRIJR9VNdt4l1QlYFTRxVrKt6zqsHESpHx/b1g+FrShOYAjAZeGHe8mtl9L QM8q3n5UWtYEPYOUMNKwfpjGnL5jhjGsP04Wi2XFvgVQtv7pzkjzayoJVpWmAj29 COoVnBTFBKEcEmaeMhwT1+w91UHuKP/NqiwGIyPLOCqFZi7hsCDOe4dbnM7J41fk rkZI1zIN2PNuZM9YeN56ypZRcgG2VICXcxdDat9klvlgEzzagyOYOJTa9DIJIkTK a7gX6yZm/E/QJVaRl37PNXoFqnMhQs2ol522C8a25GqbGjCXIMeEzEk6pkouWzxO RpXLEk4GB7fWyFF4ILnvH6cf8hHv4udWd1oiyI03uFPwDpAcdvUrhLPUjBQ9GH2x plencxd6f0V+HtCNrV7ycpqCIQTyZ/mmC6Js3x0O3xtj6u1Wz7N+TdghUK7kXWs3 MAkiVcjrYTlpE144cWyAhl2Ts+frgHk9HGU+0JRwxS7XXOiptzx/3aPGWc0lItJu VV8WjjwYPtDJ8IxqHtev+K3N4bh1UYvZIlcyeHnncTECkiwMIX8= =pYLW -----END PGP SIGNATURE-----