-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify turnkey-oscommerce-18.0-bookworm-amd64.iso.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-oscommerce-18.0-bookworm-amd64.iso
      b884f0653e76f121fd9d573cef06ebf7b7a7a73eb85854e16e75b06201b26fff  turnkey-oscommerce-18.0-bookworm-amd64.iso

    $ sha512sum turnkey-oscommerce-18.0-bookworm-amd64.iso
      d1278f90a9c0477e28fd4c20073ade4a84d2e540fa566bf3bc6543e42e5c9f0b051df4e7fadb5a13ac067b2730df5a17df5f2dbb477087c2cdc34499f7fd853a  turnkey-oscommerce-18.0-bookworm-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-oscommerce-18.0-bookworm-amd64.iso.hash
      turnkey-oscommerce-18.0-bookworm-amd64.iso: OK

    $ sha512sum -c turnkey-oscommerce-18.0-bookworm-amd64.iso.hash
      turnkey-oscommerce-18.0-bookworm-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=dnoR
-----END PGP SIGNATURE-----