-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-nextcloud-17.2-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-nextcloud-17.2-bullseye-amd64.iso 8d38e563e4b8dc09060b4a25fb6786346d60c9eade7224e7a5f4ac36ec2051b1 turnkey-nextcloud-17.2-bullseye-amd64.iso $ sha512sum turnkey-nextcloud-17.2-bullseye-amd64.iso ccb14f08e07b84e42834d2cbfd6ff771e7d2c1a1252e59a1a45f74546fb388bd4ae53504d64a6e5d48edc720d10a2915c3e04aad5b6df8472d994d6fbc6eba7b turnkey-nextcloud-17.2-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-nextcloud-17.2-bullseye-amd64.iso.hash turnkey-nextcloud-17.2-bullseye-amd64.iso: OK $ sha512sum -c turnkey-nextcloud-17.2-bullseye-amd64.iso.hash turnkey-nextcloud-17.2-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQr0ecACgkQHkh6RjHW /rYsUhAAly1rekAseuDzrAPbUIgT0UCrhbIM1TJktZQPW0oUfyjrcusNIU0d3zbR VnNgXwH34sjvwtxwogGg4dJdap/CJVNvsqzJo7wdwBXvnmz+++g0ZFAPUIpi6xit PeOwvlBWqFlWynytc92TuFAeWQiywOXmM+yiZu4NEtMB4BMcs0gkyY8eYGqUacJX qwJQgZRreVcMuRUd0c9yoGwDR9JA8wYjdEpGRKFuYtt5M+qYe/TQ+LTXugX3sArY zsj98cyURRaYCYDMVts3qCHjrm4OMEsS8ZIISGpjTl7HI4P1P16yCci99GW+v/Ja 4h0MO502VYFFEg+QSyw+a/IYQTo/mWJqF62QQqN3M9VClDZ0LRJhAmCQpWmUxh0y HMb3Q9/w8TiY/e41bhyN3Av+yJJf49B4fUppM4NO1C1az/ev7mmbVV/J4hX9Pxbb 6MTKjI5MzM8/3eMpCkkGdFNh4Mg9rWhcIKpSBEterbF2gvVMBGboi2gFd634dWiY +y+Wc4rD7qKBGlI09vUzutHtiDNesiJ+1MFeDAnEHH4tXVSK5WmSp98hlDb/DPWj qGwg4W8Qg9yqve57TT4AxOLBJjIUk0Rc2j+dum8MHlGE8dYOF3bySMKsIxWu0AVI c99r5QeagArSvoISvS5hAiY5X8z/RwKZD2x0KsLxtUReaXKLL5o= =U1Lx -----END PGP SIGNATURE-----