-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-faveo-helpdesk-16.0-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-faveo-helpdesk-16.0-buster-amd64.iso e757412546389062d9279f58094366e288a2663036a6e2857adf6b52199716b1 turnkey-faveo-helpdesk-16.0-buster-amd64.iso $ sha512sum turnkey-faveo-helpdesk-16.0-buster-amd64.iso b76b799f65d7d37f1ee2c72df1a736cb641bd2851b1f0d3118d34d473e4fa07243387732097e1c7f1fef2767880547b8d0937e692e204e33dd6f680eadc6d478 turnkey-faveo-helpdesk-16.0-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-faveo-helpdesk-16.0-buster-amd64.iso.hash turnkey-faveo-helpdesk-16.0-buster-amd64.iso: OK $ sha512sum -c turnkey-faveo-helpdesk-16.0-buster-amd64.iso.hash turnkey-faveo-helpdesk-16.0-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl/YwaYACgkQrF6wBJPl vBy20xAAqSYwJ9crlfCPGK9uqAk86Y4T3Toxw4vfuUHVoYhRnOm1ZSfky7bgJi7w f8glxVC0V6j3EEK7NMZmJ4Ac/qW30YP97V3uK0ItfE723IjIyTqAI/kQZe2BK/Tk ADs3KH4+UiKnVL6f7xvtOBH8o/oWUdyHbfijhbrZEnoYSNrw+aEqj4R0XNAUi7SK ImMUFAx7veIlmFTlG9E3EdziEp6wpG1hk7diF9fECDNy/Wy7cShqiW0iWBtm+Bid qPEdqBa1Av53sEe4EtkHl6F++h5Tq80yoJdWsfpzPr0HiYpl7Af5sl5mWvijB6sf y0arnbOSK89I6o0Qo2KqIfnBq8Oe2L+d3DlCCJ48eRsgh0Djyk9TAEocdsvs5NTi 3CLlglWCPYpp91MCevobonX5aQTV7huzHEgofbZYjOzHN7i6DqLy7xoGmhogheKH HstAfiMkHRJbE51rRmEqyOz8Nvk2EklD22P9mp3yOe+cV6KzsGEB1dX6tLWy0URD c4X5bzU2JnbqTehQbY3ScTyxdUWsPV6He+ItOwEOeoJI3ZUPF00GCZdXEEd55i+S 7qu8S1ArPALw+PSvhgye5AljsfkXD72vKj5TuUUlk/PM/8zm4zEPHjt/a0qFdTBo JB2WxTiocD7riXkXurbyQiazu0NJYYakDLQwBcJ9EqJ+tqDES/s= =9aHu -----END PGP SIGNATURE-----