-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-gitea-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-gitea-17.1-bullseye-amd64.iso a4b921c2fe3571044d405ae03d4ebf31b6b7ecd5f8fedf8b3b2670b0ec44719d turnkey-gitea-17.1-bullseye-amd64.iso $ sha512sum turnkey-gitea-17.1-bullseye-amd64.iso 421a96ff05810907f306730eaa5987c0f3b65f08bf5d10b6d207e40901efa6a7b7a6b6941018f8d5091f583eed506e3a32a5347101741e5c26c8fb282bb0ff31 turnkey-gitea-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-gitea-17.1-bullseye-amd64.iso.hash turnkey-gitea-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-gitea-17.1-bullseye-amd64.iso.hash turnkey-gitea-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTsACgkQHkh6RjHW /rbAKQ//dkJTcq70/OPJPgiqZktU1f6w9mxke95hmDEnsrNm2YpCRqcsTZrqDWit dvF6WUT298HmsVqipot8uvXe8Sx+5FxyuNDSNSpd2OsScVE9q1mILPR1Xm3jG2ZW mPY3VWTNzu6RmUrO8A13lD1OfGy+w5lfMmW1zAsq1PGfS7ujpBfGma2vacEewdKU DUQOzxZUr43XxyB35M6Cy3vn9cFxzYliO2IGsRlbqe7/ndMCPSvRxQWRU4fOwQ7r 1BEhwwF48KmZ8L9QSc3pEUg0UZL0LUBRb66m80J9D3cXOYaf+bu/K90UNxX9YcjY XFO6zQaGqQx2ybLql3o4mhqwnEsn5OgOlXuginsonV5LX4AWVC4nAsgprlfEPJ5g z8qPNG0Mah3QMR4dsXzrq6nTueX5ENAfQBaFbXDUowuJJfvDSDlBZ6LK0ye34db1 AdbGfsLAsgo8RCl8wflh6XASIBIMNqqsk23YiMC4TAr70r0nHjWuPYK64IrH3Cny KhUoYv9onb1C800ppL3NF3bCxq7nrHbsReFscfuUKUs3NzUHWnB5wLgc4YsswrFJ OGjbH8DY5a9Djm62Q3a/VY5lzl+Ln5ApNSZ9omMp1O/n+LaOgpnUqz7KVStLaivH aCheCPOntyEpombhORVN65otWyt6SiiHqEk/T5pZUigJXIP2gTI= =l+ax -----END PGP SIGNATURE-----