-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz
      f3f0484e8f08fbbc9e660407aeecfbd71eb6d3261f03fdaf0abe2fdb9907364b  debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz

    $ sha512sum debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz
      c0eff1f6d9acced2b7b0c4a5f6d8d325d45dece252898d5b202fc55e380f7d0eb031e1a919b9f61b0f9674454cbd7cb5e689542e4854c0f81e8f60fa13c99c83  debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz

   Note, you can compare hashes automatically::

    $ sha256sum -c debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz.hash
      debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz: OK

    $ sha512sum -c debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz.hash
      debian-8-turnkey-gitlab_14.2-1_amd64.tar.gz: OK

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJZNo90AAoJEIXCXpWhbrlNxW0IAJVyAO8ABSqHGbNxLaq8f2Wd
wvULqsXybJhh95vfEIshnK3EM59OabDCDGmpk+zxCU+EkMgI93HWzVLRf4wA0Qpx
Z6QEzASKLb0sdQF6pRKDsJ6hIri/rHlms5PWDjZemoL2/GqKP0//hChUkPjXL5FZ
wCbzWcfZTowumLHt/DcSfRVLppUHK3tIG5cGOZo/dhiJ3Eb15nFU5JZP+an2kmb/
eJ9GPN9Xr8JDb4upO8vSar9wKUYLpwkINAdm5q6Wuj2bSTuwZ6byvMvwE973zRCG
B6IAMef6isFWO5q22TWATcA8/gSsvkgbx7l17tFSwg/SJ57hSi9EyrTbY0e1bmI=
=KFEl
-----END PGP SIGNATURE-----