-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz 35e5cda3682f5eb3ac966c9572b5cdda17782a0c7ba3f3c682be753183b4bdd2 debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz $ sha512sum debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz 4e811e9ad79a51662eecfd23e734dfa1b57f742bac43edc483970fb3d6475dc48a660d42cfd5b5286ed1d5dab11eb100ca17613b3de65e7a7e7a7401682611c7 debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz.hash debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz: OK $ sha512sum -c debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz.hash debian-12-turnkey-wireguard_18.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmX2s+EACgkQkPLGHN5q 3jdGmRAAgqwwNJmXCEr6TzFovaaaGXN8lvQxe8n5lYZV/idgfzhglklt3b2pMqk+ DrpYWtFiU6NbK3DPZSW4dW29B/QRRvKqAp1Fg8GfyhUwW0ncQTNBmUrns6DcyNsS 8c1ag/v+YU+SWXvtggrcJmH33Gj4Oloh9lStpRvDmiYMR1sgVZViqj35tsFBOTgA Iw9tvt6wMCsH26NWu/79+IFpzZPg2kyqQi1VXEYIdiv1o7xLaqRfzJZclaowmvej xLCFd6C1gPQ76rmjUF1/cX2PjMkySvw3xqR1xC0GgUWBMEKodL3oJUgqYkpszIVE lQzf6bIWoNpVu+GY9uQea960HVodsO6HajpNlQeaxlV5MEmZue6YTuepFOoGQPGP p3KQinNjoPT0SZZrkW8yZ9m31E8nnl/5QsI+6m2SXNuPmk5djeaVPN5hDGzta4fH rNucn6ywsWRyd7uXg2dSR5PRETFElOWQeQFsaGc2Z4EvFWqPpZxDwmiVoGz4rPdx B0KcVl/aeR2Nlzhqf8ADJjF/iz8AIYJ0+7yaDoAdAgYSjyOZTnsCt1m8TTm2wAQ5 Pj/9SbiHjVtexf6uDCJyfOTBKDlkZNH2pLk9d5rDxs1jrDJ9nxIGLHwuz4e4Dvo5 ctgX8HKkMEHq2xKuYV0D7d0OsYElt6oR3EfwH6fOqvb88cSFxXA= =PGLe -----END PGP SIGNATURE-----