-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify turnkey-moodle-18.0-bookworm-amd64.iso.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-moodle-18.0-bookworm-amd64.iso
      9f1af78bc8e818c3a956274d4bf3384f3f2049e84e695df2b0431bdd7a44bdb7  turnkey-moodle-18.0-bookworm-amd64.iso

    $ sha512sum turnkey-moodle-18.0-bookworm-amd64.iso
      ce85f319d53feb9dedaa9dff4bb09593149c1405651c1971ac6a0490c61f34f8724c7ecc474322defcb94f9ccd1b5bf1f4c88c477086a6debd3d4f7aedc6591c  turnkey-moodle-18.0-bookworm-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-moodle-18.0-bookworm-amd64.iso.hash
      turnkey-moodle-18.0-bookworm-amd64.iso: OK

    $ sha512sum -c turnkey-moodle-18.0-bookworm-amd64.iso.hash
      turnkey-moodle-18.0-bookworm-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=GKeS
-----END PGP SIGNATURE-----