-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz 77145481b77a0db04a2fa770d6e86ba9bad506bb91f45959585882156a31cbe3 debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz f4ff49ff3ec22f51122a8fda0d8d69b2a9ba0b27aad1daf207b6a2b762441129306e3bd10545365dba4250d9bdd3f1a35a7c6ab820ee308dafd2355a5845e7b7 debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz.hash debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz.hash debian-11-turnkey-mediaserver_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTUACgkQHkh6RjHW /ra8WA//Xq/lyThvKekfJ529il7ikE441yiUowS40gPnwhgxkOa6BzUNndw74k66 dWI2y9z6MTLlDTomOx3VqvCyIihLC1Ibl+dt2Vkeb7CsJO88Mb2shXddaUrP6A1h Rt5tWtLlyirw2UyPl2IUlRqvK/6esVAb2aK3D247antIjAwLvTU3qxmcHj0Louy3 3jn3V6THw+ySVL67Y+ooYTFcyHIzh+zNBgXqnhlPKkdow88azyiTgKbA8GDMQ/f8 FGQ10nnG/4fzIO5rrjzg5lxWBYD3mOvXSnIF+KweeTjKeVyTPcs185x3Km0d4rrN 0bCtuFoGjWNw5K/XGexlI+Tvez8ZeN92N9WLg8doX6ihZZIQe83ahLa+lG/3zVy6 v8mrv+YHBJXjr7b9jznVp9fvttf/k1RmTJtGSQMX3V+IDnk2soY2u8Z4XiObwowe eo0j31ChafJZuUBQ2F+8hZuJKqYbUYQ7yx8gbiH37tTqGnhjiylJlcgb2+Xya5K+ xN548wqvzTNU2WmEfffQQ7IMSAxU/e6cy4IZ63gUd/wGb5DVioSNsK9PfP0jqBDI pgMHfMClbjK6aP1VPAhKYutzBvuBeiEK4/tuv10nvw1NEaacWKuerfuc2wl9OgFA dQFTXsXT+5gDDr6fUOSAtKK42xLTpmHPNjL8bXQ2wpFwEnJvM7w= =UI9J -----END PGP SIGNATURE-----