-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify turnkey-mediawiki-18.0-bookworm-amd64.iso.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-mediawiki-18.0-bookworm-amd64.iso 84cc20aa753802d246d2f399380e30ce670274624193b1d155c59ca2a7a30323 turnkey-mediawiki-18.0-bookworm-amd64.iso $ sha512sum turnkey-mediawiki-18.0-bookworm-amd64.iso 51496d56848dd0ec422afa2ff805ec1121fba12a7c26e4eb544814cbbccae17941521565b0ba30c53631d563ad7304f1ff0e996608dcdc38bb17a45665e752fc turnkey-mediawiki-18.0-bookworm-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-mediawiki-18.0-bookworm-amd64.iso.hash turnkey-mediawiki-18.0-bookworm-amd64.iso: OK $ sha512sum -c turnkey-mediawiki-18.0-bookworm-amd64.iso.hash turnkey-mediawiki-18.0-bookworm-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmXIsWQACgkQkPLGHN5q 3jcVvQ//VJmy/RW4xGXso8nVpiqPLRwFYpV9+SrchVifNV+AB2gRXTWwIP3S0czr Ebx+PoCg81gF3YV3H5z1+RClZHCavr7fNO9i/uAArPL57yorCN1evV3i5IgPQ2iX j2GEdcCsbsmZAg4QKYh8LUkWF2U3LtP/66HQKK05QEZf+HaLjAyRJKHVm9hyG3In k0Lc0Rz1aC71fLl6tbeyQbCdBIB5q09Wgy32KbEnQ8Mx6bJTGWJ5VPtlEg9xDgR/ iB7vUUJi0/dJ+8v5RI0TFzxDcYbqjq4E99mVBmMNbovRh887iyKqH3E6plV295Ls UByBep5OIifwtiIIN5ft/R7i9nWrKq8Ky7RMaRldfoEd8uhVBMdO78sEZAxmvXpn biLapK9xSBZ1t7hlfNQz1hJOjJd7EMMrIs5idAd+cPANojaN+KgAtNtjTg8Ww9qv NobFfMadwj+SpXB0LijhfT3xjpl/k/JraS1Igr4XemNdX7tgQBuxMNRhwfnGdLEx 3uhX6MLrZ5wq+gorSJ2AfJENti+aG3IznxLshGvz/idsX5WmFYj/0n0wmFhnBgem wVbg5d6GdBsL1Itpm8Vq6hZ5+oz22vGVK1aQAvmgmTS6ic/UkKfy3OQHtRVOCGrd xO3GxERTiDH9Dr8YVKrcdeRPrbURwokf3n6JghATZfyJPE933gY= =/kn4 -----END PGP SIGNATURE-----