-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-mattermost-16.1-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-mattermost-16.1-buster-amd64.iso
      705a574a8541413601191f4e22892420b7f927c4608f4d742818a2bf6a5f4c3e  turnkey-mattermost-16.1-buster-amd64.iso

    $ sha512sum turnkey-mattermost-16.1-buster-amd64.iso
      65523dcd0e4ef6ea254b9737014494729d5c6745732f05121a730b9c90dfa4c5a536a6b9add1076eabdc16cd67ba8a6676c4ec75a86d4ed0da1d21f7d254affa  turnkey-mattermost-16.1-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-mattermost-16.1-buster-amd64.iso.hash
      turnkey-mattermost-16.1-buster-amd64.iso: OK

    $ sha512sum -c turnkey-mattermost-16.1-buster-amd64.iso.hash
      turnkey-mattermost-16.1-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=ZUdX
-----END PGP SIGNATURE-----