-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz b22236a43ab8303714d1f61bffcc43df67de5806123d786a6c5b450d2069f50d debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz 4c3882e736b43f02983ce8e14b45e7dfb4e3f8502cf1a13949ed1877367638a9d0561556f0aa256113dd211fe570dbb096fd13cafc80f3931702277cdc2ea070 debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz.hash debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz.hash debian-11-turnkey-nginx-php-fastcgi_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTYACgkQHkh6RjHW /rZrIg/+LkY8gK2KS2hoDWvvIkUftwO0r2NVc6u/t0bRFP4nZ22TyfE4dDTXAS/z pnMb2Dwt/T/YX3KUqdBnetCC3hJup7Te5rEfjy0eKSj0lc3MBdA1inV/fgTfWiX3 HX3jWXqFjmKjRcnQNELnWjzJiRqC7k7v2mFky1R7pzQDbyOM0cm+RwOeZG44//8l 1OD9Lk9Y/OdS+yeXvV+MaQspZOkXyNLRehkXjL0ANHEx+O2UD2chtXSU0xldmWE6 6aul8wYeCYMzq0whUP2Al0rGBFcnwb8cHOlgXo/eRhqs+vmxFwzMv+0MKHqygvQ6 72lwMmANHy6oedmfgYlmVu+jb4WYU+L+p876Ty51SQA+5WWxqPSmfgv9TVPsg+V2 hjRdsePQ2OQ/wnBDYiqLjgUV4l0ozHAlBfsK85AxvTj1bMaI9oGnuGcINF8QDUkD kBIioCqFeBdm8q2Zg1FdWhvzE5Kv0Qb4IclpKbVxXaIm/Rn8bS+75EyxEyMeREvz 2KSJRFHWYC0A3KEdaSDgPu1tqeg4uwQpUZJ5ngmEa9t8wD2WARCp3Yw12ja+HvC6 AkYQGwkju03K9YlD7jowyIGzO7EV+wLjbYL6cV1258OZEPYiF8nNDbhUX7Nz/bJB y3lzpsp3iKzX9p68Vvh/Chvyks8lq93V1Ks9bCDgAWARhC+C508= =eBUQ -----END PGP SIGNATURE-----