-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz 5593a22aef388c22977ed0904de58703425c3d54231ca1b6125576999cdfeb99 debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz 5b6d3cdd8fac06494cd094dac36a9b2820889c4b3e0ef033a17b3f4d82d12390fccbcb0ab1425472595d163c6ce28c047bda5bd8e4e9c551a7db2744ada3c130 debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz.hash debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz.hash debian-11-turnkey-mattermost_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTUACgkQHkh6RjHW /rZlmhAAo0GzTSDck1Bohtzxk7+UZA3QsnhnCIJ5NJI+VjOKWaOisZgEkVhyMKum y3/EMpGUk3rDtD2rLQOzVQuRwcKZYDd8upwlganGOKujZBME5VmjwtDEH2A6xeri hbho4VDHOjwGxaAy9vDkGV8jSDE+EVODFhBE7v7xwTSLyiJ8wdP1GvikklFdF+zY iNy2K9Rr5F3WEP5NGpmRVsPszXPAKJDLEKEy/jRpIhPiChZnOsKabMTeeGHHVBI1 XpVnMu9S1rGs5qOppjnlqyHQi+WogY4Q5654nvvkGOk/JZYrBxxjXWMT3LygODWd IaDAiloQxKjpnHmvACkwgrZwXs5HsXo9YzIE3vaKNcEzEqlkkdlIr3zRnkWaxkmn sEgQRivEYr32W7wP+lVxZXMviG3RFlrTtpdtwKSwDNrSNgpR9M8DueFFEbIJFNqI Nsq5jNtW3QbkBjeMJ1QFHcbmXJkLx+8bEPkl6D7rvWm6L1l77nIZy3srLv+YBg7o hIIgAnT0SHoQAgLdWOKEmAXS8WRK8t2bvDJwOeXi2e3P7WuDgBn0KrGo3GhkB5hN qpvtEB6d+aiH8+oaXcwLirAslNDR4/MZWNNb1bNiMofvm99V4VlKrdk6f6C9RjCR iOv+MVmaDjs4rBqS0/gCJbWuptPuei7KIKsy1+vkDlfzjzMpdSM= =Tsuy -----END PGP SIGNATURE-----