-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso 4b478d3654d05a62772a4188ab3f0eea2058ad4ac04378808fede89fff418794 turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso $ sha512sum turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso 2fedf7372667f04b3590122dbd654db9e9325be98087369ae5ff38ed8627cd7e087f5358b3f14df6f35c14b3362db1d22012b97c15c28f0bf0850b148798ceb2 turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso.hash turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso.hash turnkey-nginx-php-fastcgi-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/IACgkQHkh6RjHW /rbumQ/+JnpESZMp/U4HJ3gNqRizruzX23TqoMODyj9V6zL4UA74dAjuPdqP98xd 5IstjiGtMRd0hIYyClX7Jj9UQKpMpFnO0yz+dRT+oZ3KKdwlRi3ciGEVIOY84MKO hQ69KeJE+JYRUJ18NeIN+2ey+qLjiqmDl53JEujalyLCvMxHggxLpF+5zQn5A/vM IOpQudV+aR/cZCTW8C6iaOUw9qfGZEnCqs4ryB13F3p9VP0id3Y2vvFmZ8v48Zr0 LFu5e0a9KXj68L85SSRcj6EtEZk9886t3BN4Ic8onDenibqPaLoGpr88W+FplAdj 7Tzu67pWb7lFAJ8gzvSlzd1Gz0b1mFCvw787FTpxrGsXWJzmg8K73oNdvVhXkFHC 6nk17GCa1hBoYCb2aHqBL2cTPy1w+QOCa8LHPnLIVdk8sAPiIpQqEPgbWcGoW7Qe M8KUZnszOPyrNh1rUp4Kfohfg37Ug6zii3WkJ0QSHSu4LUquOf6C1d5hNAZHIJQP /VC7OdfWCkE/WhfG9SO875Mqixeji3ysrDVOUjTOAbtIYlEy0HYITWWyx9z0y22G xgoa0OBIPooSWPTSG+kdbTIfX2E9dBL8lueRnY4BA//53jVWorPXWx+6FkqYCa7w kz4eoRPfmsmkGpQW9TAFalI9kUt1gdaLj0icplI/SpJE+HONOTg= =YWhd -----END PGP SIGNATURE-----