-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz 813929d6182804d0fa8358e68774c27014ea01d42ff5219e4d55bd871f727abb debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz 12a7d6080b2b109f6bc0c5ae13cf1ab2f0653e6b6cfdd07ad0a283c814f07d9bcef89555a36fa2d5b9e73487e0596cfb177b6005688554903e72a53f9bcddf12 debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz.hash debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz.hash debian-11-turnkey-b2evolution_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTEACgkQHkh6RjHW /raIURAArsxqQ4hvW9SovmFmKAx8LPQaLQKz6aD9nbaf2YXM/Sf1Ah8yWD4SuGlL XVZ0COHOieuFu0NOYAJmKQ3P1trlIRPwHvbuGWFB9BLnXSjjSSwBN8dQwYRuA3v4 jjgs4f5R0/gsaq3YSxz1aKW92+HHnxv+xXb4Cdr2Gpj4cGLB4oiyxYzpBvS5g9sX a4vGvk1p9Q0kavNmAnh4Flrxqt3DKe9/P/ehXRz+patvGmX5FcyOghPc9ziRsJIS /ZsUp+DZtcTp7VKiBYJ+3CKCKpI2Fcj1MVe5j6o649fG/WS5d6NjdsmOYxYURECr dtaV9QywTXjz2nfvdc+ObVVTeBuImLd+WVBAeNFOwBje+YjxqkHN4oYLTwe6hjwr O8FAmK98RmXEODGhHOvz1hSscGQ+wlFi6BiDWeiU99nGZEyG7WjyVqg1Ms9YUpxI DCkqHw2mWryj+HjiDg0kwU+uBhy3w7pwvPUfr1PIXuOzzTFN/4DonbxeWiGP46fh 0hcaB3ybB/+3P29EwFadtC9AD7O4IXl5obZacBqjOm5ACYbZinrAbEhHvR7eLlM7 lxAkgFHDtPgTuCzLyln4H/8/64ZpXIuyrGmA0kROiqJ/wbViE85ESwoo4ZEjWPEw jLvOP7wjDMazDdvb3KFJnOmc/GA24rkv+3xqTsnNQ61Xxl5UOUc= =D0Jc -----END PGP SIGNATURE-----