-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-mediaserver-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-mediaserver-17.1-bullseye-amd64.iso 4964daab26081d1bc1d7b6e33034ef9df58b206b4af43e2c0fa5cdf43cbedc2b turnkey-mediaserver-17.1-bullseye-amd64.iso $ sha512sum turnkey-mediaserver-17.1-bullseye-amd64.iso 24447b75533d9cbe511c8b857665db83ea052b9272c136710063136132113a9f710c3c3dd150313469d12b6525e2d86e4540a04defcfa5070b9042c00cc87dc4 turnkey-mediaserver-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-mediaserver-17.1-bullseye-amd64.iso.hash turnkey-mediaserver-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-mediaserver-17.1-bullseye-amd64.iso.hash turnkey-mediaserver-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTsACgkQHkh6RjHW /rYa/w//TRBD6hFfwZTmki50TnNswhvr3sTHHLoTjx+SejggWxPIZUGVnJY7xbQ2 W5BnAPLE/3P8hZcm4+lHaKeFSZbxamkFVDnolRLFogV+j+MtUlKTc1JillZZPiza 2pA3NQwLdNT7X9pIjX6N7i2hmZXCePPw8gM4R29NZryNDizyamO/G/xiLpcEBRtk 8tx+OkTA83a5Zs9zlmiK7E3pi3kzTHyBuRooZBmotNgxG3p858wG+60f4jghsITB zWJjmMWFZQclgR7IZ+yhsfjMhiW3D3e0QxIQEPHSyf5XL5E0cRAmEDr3+oeSuXl7 BG4F/sNLqoaIaFmYbHL9yBqDTCcNzLBfvCEKFjRDmKSjUl6XMef4g3g6xceaQAB9 Y8eBFZp0TPgl+5D3Ic2EQ69sljkC5xpoDFDK85F+dmNmgJ8w0S+07mNU8J1vleDw ajwdMipTDv93NF9JDrjnDReGhXso9zdHSpOIK3/NPnBO9EX+iWO/0oBRcuyS3yer xbKJSHgEfa84fXI9U8uCEZrKOuP1XF9cUWrlGNVn8MRua8ZvKyJllDRHsFDVrXDj D9VD5igTQgNC9DrSbVy3+YjeqKvhhte8AhNUz4fXzrT91UdInnPl0QgK/Hump62v JzxZ04+KQtABVVGClXRm10+l53lhBjj+KcuN4P6rxr0mvpkQfWA= =wPHp -----END PGP SIGNATURE-----