-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-matomo-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-matomo-17.1-bullseye-amd64.iso b5147b6b981d11edd8f03c718404f3ebfe6ad755e5942ef7d1fa497df53943da turnkey-matomo-17.1-bullseye-amd64.iso $ sha512sum turnkey-matomo-17.1-bullseye-amd64.iso 73546c4cab9befeab4bc4da6ccd22ff99cbca5874ec5654cbe75c8ddcb9f579d7abafa247d12d9ae0b56a00debc089e8bf4750f1fbefc30444e0dfacfc7ff24f turnkey-matomo-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-matomo-17.1-bullseye-amd64.iso.hash turnkey-matomo-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-matomo-17.1-bullseye-amd64.iso.hash turnkey-matomo-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmQEVSMACgkQHkh6RjHW /rahCg//fXUmkYV/F+TPmA9fhqd6NV6IKykPlS4gYHJhDWzuL2a4ZyehU2ovsnmB kSWNns9mpsCFy8FQtP2sXt7nn/BBCXAhwakgrzOTxpHJOWtl9QtFDtMh1EoxInXP qsT4T7QadCrHRoo2/7LYZ+BnArhNMFPU/2SkL4i2yyHrms+mO6yIFRSWGcpGX4I2 IvdcEicAz9+5ca/Z2tdwxcF49d5whNw7CN8UblFfRzJx4cPo7rz22DgLrq/Q4se7 zJDuIn4g4rKs3WfvfkpONnkSgMog56Pd4P8BXesD3oEeIMHHz4A8To75Tj0xztoU sG4pIulUYdZMbxNd3uNsA3OWdUONWFG99bjCI4IWN02/RejLdUX+IGXruUebyyY8 Xb/n+djxqn5picERx6RX7hUVatJGGddbc+7LVDHQbwn3au/zSdk4y31hRZoRiHjS wI2taaUMVLKXFlKr5wUgn6f2i8kk9+jS0yMy/sqfzouSKfBuCGQVkBQxfFocNAKV OGkbaf0s4NJ5e1nP7fautgZmhpI5mvSlyJ5xFeDDOSyHP8MesNyNYaxAqSRs2JdG szoB525+LND7IODW7XsReisTzsyI8EBL1ncjyiSgsnPZjC9QRNCYO2hiuvR7XUNC kzeEkedwhZz6/D7mw1CejSoS7G7b7t9Eo07pTD0nGUyaHxb0Q04= =IHB+ -----END PGP SIGNATURE-----