-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-orangehrm-17.0-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-orangehrm-17.0-bullseye-amd64.iso 41b8b810a0736d9e789d97eec6b1d0ada128ab2a7220b8aa0da6132a71f98289 turnkey-orangehrm-17.0-bullseye-amd64.iso $ sha512sum turnkey-orangehrm-17.0-bullseye-amd64.iso a23203203142720a897f25253dc7990a6ef8f6af6e599e1009aef9989b4f9ff7564cec02c5f609204cf08da3e1335c17f336c2e1fe91bf3c64635b6c58f487c8 turnkey-orangehrm-17.0-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-orangehrm-17.0-bullseye-amd64.iso.hash turnkey-orangehrm-17.0-bullseye-amd64.iso: OK $ sha512sum -c turnkey-orangehrm-17.0-bullseye-amd64.iso.hash turnkey-orangehrm-17.0-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmJw05cACgkQHkh6RjHW /raC9w/+LV3gOefRRpToEN7wx/lYIh37pHoWDqJWiRxAfxqzcWT+qjX/6ZHyi/43 X0O+NPe6w1l9Rct2gC8Nf4jH+9+3nv0huz6fAuMx6orfrQM4+2/4/9tS3rSq1hIe HzdGt5ZG5cKbJf1LgrcFLkLOEF4IJOuq4iTeziPUgeXLmD7rHuv+z4FfTHErZ4Go 2gIV2GwAfudomGixsYaGeZY2QyKgDhpkLDd8mP66S9hC93rh3z6z4lEPgoPeIJAH CJOSvz6hYNXISbq5KkuVCsTeOcdEIIhCewT4l/3xBY6cXAIKrABL0jQE3Xt2fChX OA7vm0U5vNRBBMKr4QeVNQryfnLrs2IeBFc+kSZ2J+P7oerzuL6e36bZ2S9aFlEj 2mfoel3KHu5iL7ubNkAOxFIqS2qTOE3b6Zg4uZUqc53FZ0vM8ZqERBQn0Glmhj+N wEW9Yoy+6OUgztusjRSXq0MFG+w0d03Rwq4jdWvVCSuf0cxi8bie2IiiArFsgdXj 1qseq6er2948hJpT0eBnbjSfw6Wg/naikcl+1ylprCkfVZhY4JIIwv/kl5BJ+mIt 1pFWlMXmuvedXOBux3aQBQnKbnEiiUZrBx+x+WaI4/td07/BO8NkAIWK91Xx/rE5 yP8l/nSsKuEzkuENP9N3VkXUP6VwrQSB8xhHM+8OisLwjdter4U= =mbjD -----END PGP SIGNATURE-----