-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl  | gpg --import
    $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org
      pub   rsa4096 2021-08-04 [SC] [expires: 2041-07-30]
            E10F 6567 0C8E BE42 ED0C  3A49 CCA5 1174 468F 9073
      uid           [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) <release-bullseye-images@turnkeylinux.org>
      sub   rsa4096 2021-08-04 [S] [expires: 2041-07-30]
      
    $ gpg --verify debian-11-turnkey-gallery_17.1-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-11-turnkey-gallery_17.1-1_amd64.tar.gz
      a78d99c250ee13bc2de9419ca411a610e6f581b6bc698775dafa22fc233f400b  debian-11-turnkey-gallery_17.1-1_amd64.tar.gz

    $ sha512sum debian-11-turnkey-gallery_17.1-1_amd64.tar.gz
      920aa21f5e550c30c218091a2d0d59f2c891f4ab2362fa377b63c160b4e64ac216f98addbfe9e244246f4415c3654f1f473bc24630b46a635de81dddebb608d0  debian-11-turnkey-gallery_17.1-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-11-turnkey-gallery_17.1-1_amd64.tar.gz.hash
      debian-11-turnkey-gallery_17.1-1_amd64.tar.gz: OK

    $ sha512sum -c debian-11-turnkey-gallery_17.1-1_amd64.tar.gz.hash
      debian-11-turnkey-gallery_17.1-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTMACgkQHkh6RjHW
/rbVPQ/8D72cKs0ANKq7UvD1Ve8hO9c7jFd06ZiMqlWBvSUm4VNFYZDe9ZkjH2/S
rJ6oZVJGAI+pZ5QIzPXT9NOk8kyaHXPoxGELC3WLvyeEOX86SvDif470Q6PMbIM5
0p/FCpiyQ7AYsUN65HFzWPMu9nwmymaJDRhQ/sbhHEsZLpzlzT9dVMzPfhQU1nn0
ci7SX0t8P5QIpPW3/G0v6ZiTXsoizhBLyOqjn2H5AEamea8br6UYd307GfstGt4u
w2iWoLjJLpJa/rTqqkoYsJfFUXv+LS/dmLq/TAG8zfLoMEmPbDvzxytx9WXla2Cm
KglQJncmktjaSBAo+0fAGyYwE0noRUz7uu1qViAFcKCLyCU0g8pAnD6dcRNTUkCQ
jxdPx44pNE5UStcQrGyXijlLMblYSTESju/y9PxiagjfoRVGY0TB/e/T/UY1mGp0
PO6vNEyFZQoIv4AWn9iJrLJDLBJ66nHR1IVnTtgYKC17bH3HF5WJHiH7zFTcZLJW
7kq+BbfYcoo5xak39lQHiYyIMWkbUPAcg29mhwgdHQj3/sSc7njFLN10HXX4zp5j
JOu4WlB67kDXz2vIwBiRJ5W79PVkP36JfxQ4o6tCHyxDh1eyVjiDHRMR2RLekUMq
HawTCXxHEzDBP2wJh631Wm8OED5sNTsLTS3DbOTmftFyeigeqdg=
=7p0y
-----END PGP SIGNATURE-----