-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify turnkey-nextcloud-18.1-bookworm-amd64.iso.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-nextcloud-18.1-bookworm-amd64.iso cc36f2570426c4d445a22cf637ea3be2d722bfc67e290724ba849f6f8ca7f5ce turnkey-nextcloud-18.1-bookworm-amd64.iso $ sha512sum turnkey-nextcloud-18.1-bookworm-amd64.iso c640f27313408414bc575859553b469e023bc05c3b1aa324fcb2a2226ef692a14bfbef7422f34262be6aa4e674eceb3bf303e4bf4eefe37bfbd3c3da23d32597 turnkey-nextcloud-18.1-bookworm-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-nextcloud-18.1-bookworm-amd64.iso.hash turnkey-nextcloud-18.1-bookworm-amd64.iso: OK $ sha512sum -c turnkey-nextcloud-18.1-bookworm-amd64.iso.hash turnkey-nextcloud-18.1-bookworm-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmandZEACgkQkPLGHN5q 3je5vw/+IOOEkIkqsF8zJvr8QWIdNwTMAdWgvN2Mj9ZIi8v/k0bkZTwn8zv0M4rE dcebioJM36shJc0OXeaRO4MJbG3nIq5QC2XWsjGvSqSDfRZKolJ0NvGzfyCscgf1 tj2TsWo0i2VTPap5Clgj49Cm7yImoMQbx9O05ar9DtbnTvJGReyaA16PrFenoTXw 7+397o0z75O2JW3MELMOmpOK8mm9IsmZS7qGzriKHtr39q+ZBOSwrBWEEOzFpHQS 8uEzIXF6XKM/r+M4rhqljjCFk3RxHhrwPB4v3J1JiV9Uu396hwlApLM2Ry0/yv0c lVkG92P508nSLa6IJYTPbO+GlB3trQArJ1YIV/i/m15Exka49Mv6J1UZWYOypOXk pDyOP7rVD92hBgsI89e/HE+9EV0V+tmng8tKOqgFVr6htBhtgvJC2mt+8Wf/qtR5 hphXIkWSK3qfUC4/jf3fdLy9CjWtwl749e/+CMZIchvPU14RXrI2yKotACxbkAfJ IS6rMDmCgYjR+LBC8MSl/ip1atpqQFVPB/dCAQvtrES8a6QhltnNVgfaNJpL180u e3ma/AOxPFJMBHmf6L+D9Kh8wCB5YykYYqBtait8Uq+Cn23oZHCwrZJc5X1IutT4 EQpSaz+AS0pp0g39NnD2iDurfWW+/IkQ8DoaGv/MepHvzj2c7pM= =hOqg -----END PGP SIGNATURE-----