-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify turnkey-lapp-18.1-bookworm-amd64.iso.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-lapp-18.1-bookworm-amd64.iso
      b3a92da7635a3687f4441192cf2adcbb36e905b17779dd0f4ddb7ee0410067d9  turnkey-lapp-18.1-bookworm-amd64.iso

    $ sha512sum turnkey-lapp-18.1-bookworm-amd64.iso
      ac8f265d3c88974eb14b3c74542db409221844073868c247122f0eeff93a97a7ab008e7edb4adc89cb13e7f04fd5d2d693a80c3d7677448e96fe18d05989c5a7  turnkey-lapp-18.1-bookworm-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-lapp-18.1-bookworm-amd64.iso.hash
      turnkey-lapp-18.1-bookworm-amd64.iso: OK

    $ sha512sum -c turnkey-lapp-18.1-bookworm-amd64.iso.hash
      turnkey-lapp-18.1-bookworm-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=7fUU
-----END PGP SIGNATURE-----