-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-roundup-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-roundup-17.0-bullseye-amd64.iso 15fe72207a8820a45c7152da60c86a3bed7544a7da5c1e1209f8a24d3f3fc72c turnkey-roundup-17.0-bullseye-amd64.iso $ sha512sum turnkey-roundup-17.0-bullseye-amd64.iso f6a11dbd425a85aa1d12359022f7557da9f44f378f024c2834592b9db3bb69a5ebdbb1eac3d94cbdd30b7c49fe27104f39b8e16a44fc2243147e9ff9e4a6cac6 turnkey-roundup-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-roundup-17.0-bullseye-amd64.iso.hash turnkey-roundup-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-roundup-17.0-bullseye-amd64.iso.hash turnkey-roundup-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJw05gACgkQHkh6RjHW /rY/YA/+JKMbMcvqgLTT2DJn5SHL6dTW6h6Yzo/7I4ghqBuXCeynvqNN00/oYcsI 2j7cDVW+SVv3TmIyOBi78+V7pFx7ZOm9ED9A5DUqV7izd+UEvL9uJ+Vts5zA+VKU JqM+LURmO9hri/b+rIzTmdy4e0qrbuVfe9MBJgcGF53huFcJz4TRwRwrVNhbSNYR ozbgbR8ivEP4jSkf8almITi6NtVOYIncZzCs55V7TiMQFbEsJfhfIeWyGUWcliOy j31zE+rDTHZTfTM+5QfsHoP2Gzc4W7xsFO47gJnEE5aX0y3+3MgASbjtCuJJaO8R Sa473a5UweLSnESxYwVuQgDShGkaMf10Hl77CaSCZ28AmhGRVBh2fZZg4BKRjUky CASuPk+gfUGzdFUfyXvnZGQ610cEH9405bvjCzvhMX32OOhWhwQbKZGZ4nu8aNki oTOW1tG7Ze5/sx4Gq7Nw3lL+iKF66yY9sO9VG04b7BKUd+hanV0zoljHzmd9yxJd 9bN88U2OYMfnRb3gcMXl0k7i9wYTR0EnM6wnSxJGFBRxr2Uvx2WJZs4+vQna+Ljz 36p/jP3Oar7Mz58YE/DN8rWwR7gojMUqXwT57ruJwb63R0tpnluC7HBtPnKf+1Li Ka3cvYAMi6pNLxSXt5K6JEMf4vyeXwoG8cTyHObvdGPy0p0qess= =m42Y -----END PGP SIGNATURE-----