-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify debian-12-turnkey-moodle_18.0-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-12-turnkey-moodle_18.0-1_amd64.tar.gz
      d5168984ba41fdac1240202af18b1fcd1e204c573ec771bb0ca8928a0a2718eb  debian-12-turnkey-moodle_18.0-1_amd64.tar.gz

    $ sha512sum debian-12-turnkey-moodle_18.0-1_amd64.tar.gz
      2880540303bbd0054f4fda2f754ec866f034937fdcabb5ebd19252c7235d00034daf160da2b69c278433e8967399b77abf899c1ff95b0eb9a8cd1564665f50a2  debian-12-turnkey-moodle_18.0-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-12-turnkey-moodle_18.0-1_amd64.tar.gz.hash
      debian-12-turnkey-moodle_18.0-1_amd64.tar.gz: OK

    $ sha512sum -c debian-12-turnkey-moodle_18.0-1_amd64.tar.gz.hash
      debian-12-turnkey-moodle_18.0-1_amd64.tar.gz: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=jbds
-----END PGP SIGNATURE-----