-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify turnkey-etherpad-18.0-bookworm-amd64.iso.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-etherpad-18.0-bookworm-amd64.iso b695800eb6231d2f066a722de5fa113bace54c8f2fcd712ffbdf740afce017fd turnkey-etherpad-18.0-bookworm-amd64.iso $ sha512sum turnkey-etherpad-18.0-bookworm-amd64.iso 1664386f1edfc94424dbe0d90bcd3c610370f38a64f25df26fe2e4374de40b2449dae3825de46dcc754afbc66f19e745d6e3ad2355d90390482ee9038328d8bd turnkey-etherpad-18.0-bookworm-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-etherpad-18.0-bookworm-amd64.iso.hash turnkey-etherpad-18.0-bookworm-amd64.iso: OK $ sha512sum -c turnkey-etherpad-18.0-bookworm-amd64.iso.hash turnkey-etherpad-18.0-bookworm-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmXIsWQACgkQkPLGHN5q 3jckGA/7BcLjGQgSxJDogJ9M/x0xUJAiRT7+FiTMGlFIvqx6A6KDzWV0cRHoICDQ OlGQjvfr1pB3m3Bqo+Ca6fHQaZ58Y6ki6KStCdNU2QWsooOfNekNOtxYjDqY0cgQ aMWx7zCKVnmqm9GGqcgGxmxHqz5gQALGKF+asXxU6lwCLUoBQ2jdVPJsIZvI4v4w GNAmu46IdIQX033MTj9PRMwUBM22vkdFJIewG5vmOZFqVcCv6bRPsUPbinwtApGI zQAhtZZ9HM2jiNKVHwIZbHfBOp1FiYd8DP1w48VNuEJri/Ias/m4Fy7lTzVXcaoT w5u3IyCb3A0yGFsVZiyNcN4cRbHLvBEni7uYaSMyPWhzahE5G1jN1Ac3MDX5L1JC K4Q6YMWml9NGuMkk9G0N/Aocu53X6Em9rn7DzHzp5NG7g1ayOxgGURigEEVe5FwK CiH1ZKD4lE5UlKABE+alwLrzLOgp741m5d/TXUw6SoFbFcVtk/xOW9vXFSMqOo6N Y2qVdN6W/tE/6Z2YmSN6gwIuwMrZ5b1/hC2RLs989FRwVcC/1uC7lpbuWmU67BAN NIO7e8mek+mu2qqglzbwN8Rxug/TkIj681U8B8GdUwJpArMxT+0z8LVgPewYPfs5 9PMbd3Cx4Q4qBXwExPWigbJhR89Qaaqz3HWMS4lFbgDzpFEkFLo= =5C5X -----END PGP SIGNATURE-----