-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-joomla3-16.0-buster-amd64.ova.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-joomla3-16.0-buster-amd64.ova
      a51093f87388e0f648e816bc3d3228a153591cc747eef19b2fc40a58f17ec97c  turnkey-joomla3-16.0-buster-amd64.ova

    $ sha512sum turnkey-joomla3-16.0-buster-amd64.ova
      0b5e18e37910c38776751a8cd383a7516836ab6c0f6f463be67966cde22656c4e5f0bc4a383b93076b411640fd2594edb6f45b63d403cf96357a4e30d0760a15  turnkey-joomla3-16.0-buster-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-joomla3-16.0-buster-amd64.ova.hash
      turnkey-joomla3-16.0-buster-amd64.ova: OK

    $ sha512sum -c turnkey-joomla3-16.0-buster-amd64.ova.hash
      turnkey-joomla3-16.0-buster-amd64.ova: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl7KTbQACgkQrF6wBJPl
vBwhcA//XpNKeBRDfw39KrndMWh8+xwu2mmOPRmxJXKARZOae4bY20xNla2qK/0i
bArdj5y4iRlWFsfvCWQ0uRj5kabDr0ORcC+kQSgmHvDst64IAflh3bk/s7YYPVuf
7YRLX6vpV1VOpGgteWV9h8OzmIkvF8nKg8qDJ2QhfIpkyEuqtYHyyUACLPU9gojj
w+8YZN9prp8NJFsDXmlMUnFE/VkDwC7GzpcOO3vuFKQB6icPbFTZwMQVBRmSyd7B
usuCaLwekTmVODlk+gOPPD/zmR5WyK5SdTSxUfzqg7+MqttbV+1aJcNizOv1vTxZ
LCsLZ+6eSRL711ol+w49oR94PimwkhfewMjTbDvyLtIg5UqKWineQiqx9r3e32a6
R5LF36O1TkvGaohEDTuk5A3PB3cmtVHymNaqaV4Vf1AFJejY/C6g+Fltxs2W5RHT
3HSa9Q/njJ0YJwjZUZUQcfxiu43zJR3KBGGYvGbJmo8FA/bbRjQJuuTSWXtNT2Pm
CErsqXbyRVnglhNVlWSQ21T71+aUkq4tvC9LX2SW5UW0ZrxKjcNnARanIH8z/wfZ
Aghkc+r/3MHOQlnQPCU5xLt4dIL3xhgWIUMd/PE0o9kXMm8llJzTFUQul6qeDlGT
DL0+fU82xjN4J8Zn27uRRj5jw6Vpmzl2/eA1pFd3ohk3Ny9ZIK8=
=C53+
-----END PGP SIGNATURE-----