-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-observium_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-observium_17.1-1_amd64.tar.gz 2559c5eb9527b3dd411a72069fa41eb4568094b4dafad0dc7060a034dd562d16 debian-11-turnkey-observium_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-observium_17.1-1_amd64.tar.gz 6a01e71f9806db0c2fcb2a91ecba25dfa707c16afb959952ba50abc7e0bc3d1ca34a9e444d85614da9db6214eaf8eeba3f01f943b43236c07fa3110c27f04358 debian-11-turnkey-observium_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-observium_17.1-1_amd64.tar.gz.hash debian-11-turnkey-observium_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-observium_17.1-1_amd64.tar.gz.hash debian-11-turnkey-observium_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTYACgkQHkh6RjHW /rawXxAAsmvyAFdvYn7hafb0SN+i9gShpDyF4sRUWLhspyK5TalS6LGAEnKpcHPT lqJJKIfNnuVze/E0KReS9809d2ESZHphjj9fqMFMiqh2MVrez91ovChphVvWwj1Z mz3M+8JWdpMMISzICG9cQw5codTcdFjbbh4ZI/Sp20T8Nfqzj5KBVZuWMgUOjGU9 pEe4Yl1Oan30/2vtHYyZ1Juk9W/TpBf7kDHe1VkXBjkuj8wIlSojdlUKFdOcrgn/ brcg/eaBTWzKlUwODkF0gRhZvPcZp1KC1XKgDN9h+Z8KUzMyP4Dy+j5fw7Zim0Dz fmHs+5Ygl6os61v1/OKP0JveKvZL6UiYaHlQBZkDhT275ljx1/bOboeXYJIINqHr 0ujz63nsTPYaRYsGkxzh+VCUN0hsje7Xuehur1Gj/nyPfVq6YWjZnZMG5Ng54ezf WS+a2cylJFBQybBlrOwk6lM0d/dbXLZpx9cghn6A6fToVaHMqMmr44Ufbpm6AEPJ PM4b5D3ckxKBlPop81LlGKmFJ33R22ZD5t3R8fvOnk+eaJ1JgKX4F1DkpVDNhXQJ P6twc5lDTciPtezcDHi1NcVcRKMH4uHgbw/CScLaMmT+nkHJdYJ9J1W8LJqLX0WT WHfq4Qct/qdAc04RXoF87yd4gvP2oVT+LwbGVCoG0mgHJvWohP8= =ZWaE -----END PGP SIGNATURE-----