-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-domain-controller-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-domain-controller-17.1-bullseye-amd64.iso e47d2d931b4405e425e484aa022131320535d96f21c0d632f52a0825d09f71b8 turnkey-domain-controller-17.1-bullseye-amd64.iso $ sha512sum turnkey-domain-controller-17.1-bullseye-amd64.iso f342831b22b1883838937f94a69aa506bbdb63e6189855dc44e947456397f8b13a65e4193f8eea9f0da47fc73c32c8633830fc3a5a13aef358a925d728c2cd15 turnkey-domain-controller-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-domain-controller-17.1-bullseye-amd64.iso.hash turnkey-domain-controller-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-domain-controller-17.1-bullseye-amd64.iso.hash turnkey-domain-controller-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQr0eYACgkQHkh6RjHW /ra5CBAAhHweI+Tjci9mZcRYOpDrvU8gTags6lAavM+LgUu5Ux3hpoZa/JzyzRF1 1Ti5elr/lhJgq/NrmfMkImhZ5FgQlWJxrvTjEcnXozmGCp7paS2Ixp2RAUPSfkFu Hwcu+dLYkP86MvOwUaggJQnRJubq2w3DLDSHPrJW1r/YQXiX+Iedu6IiMFurS+ff d0NL5QJm82BN1+YdKqq6GCIGeCBZWtKsJG6T60B09lRKbxXIN2Ccfpq7JZ/f3coh 29U/7UeresXB4qqVvxq62YQBr9lI8TVF7X5uuAd5lwJY+4q1D8DAnGGWqN0FMOPG buyawex7zitkpGCRKU7ZiTpvCaTlhcqGJwVYecZ2SH9U8myJtdTenTDiJn98tY4/ tTMDBy8RjR6z0UWwQFtPJxGLew2j+RDRxCSlFtZGTFOtP7yF8tGEy3HKCkBgw4YV DJ4Zv3/eorHk13v3TGfxspiFEYY6S7IZ3GfBmEXkgIqYJy2rcz4SRg0GWrwaxtIK hgMSoiK2ESDKiw8RApIzFHwngybZLvjr7OmX/GDwo9TpmS/eZ7ncarPST5uMUYVA ok5+3OgBmvCowTY1+ibkPhAQC1PPPv83syNJNxqZmTOujVgANdsYZgYPJ0ywrr19 YmdL3JyaTvpPpXoppUQi7bnkp1QAQafrlnE87kwMNcHg31HneGI= =1Sw8 -----END PGP SIGNATURE-----