-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz 268d38f788268eba0e6e6ab579be02b118b16758bbfe7a872ddbe529791c2df7 debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz 4b04e0c0acf5f11636ccf5911bab3e2ec00f7307909e666ec35cc0efe900986f6b35c692d04a0a77057150c6a2ed328a039fccb2d4c4f284abc11637ada4cf6e debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz.hash debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz.hash debian-11-turnkey-simplemachines_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTgACgkQHkh6RjHW /rY5vw/8CkHlswREFx8CngT8KPeQVS0i4oMIonxmLSp0BWTJge/mo0NCV8fJP5kW fGDCfXphE7PkSaHqjZugLh9tlzum0yczFq6n8BvMxq/BJolC9K12VODHhuGBWaxw 1rBEHwRAd/FDvcC8jseGj/H0u2F/4Wne60bVwc0s/whhcB47YRJF9+mE269BT1Dq SZWZiHzdW8JK1elb6yXXbVpCXTy81plEkGXZ3MJrtP8c1SVC0Rc8T8iD12/5rprt 1s2czJP5Qj+vHQxrOesL1Us7NA/uObSw8B7kR8X9S0PkqaPEprpGcVG75aw6Wivm jvQpPVre00viOuYfSRjjZCCgv3mJQX/sIMKf3JSGR4qnmW3Kp+kNTclvzsOc2PHW Ufs16iVIBAlD2gFVc0Yj0jmNQrFNbTU78uFtxBfUhZPZImqhuWO2QN1HLWx0n7GW 8wEKALcIa112R6sxBC/JO8Ruax33bUayJ/gpz0Ja9i6GzT73tUqTUc/HlaS2H7Ie EmCqr5FrKP1W8gFLyVfvdRqlH3GStdOvUwCa6Hx8AbegPW/mKV5GvNNtUPyFFDrn xOvmMh1pxAnZvWWOeFid0TkuUX05fphMmwkOJKXeQwX0B5jn+tPwqkaZVK+H/49q OPyHaSw+eTdW/vAxKKiLAY6GlLiyuGmEBzjZkSyGUdvpjyI244o= =ayi9 -----END PGP SIGNATURE-----