-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify debian-12-turnkey-symfony_18.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-12-turnkey-symfony_18.0-1_amd64.tar.gz 1bd1543085658442c7cf35a642d93dc105919206f3964000b72ef42b43a22b66 debian-12-turnkey-symfony_18.0-1_amd64.tar.gz $ sha512sum debian-12-turnkey-symfony_18.0-1_amd64.tar.gz 995a61b3deb8aef255977b51f71a6088158dd5490b11e828edd95aaaa379e0c23a0e28e31c1361a0b6a3f79d5c48c3316ccca54645af4e85a0c17d19b7f51d23 debian-12-turnkey-symfony_18.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-12-turnkey-symfony_18.0-1_amd64.tar.gz.hash debian-12-turnkey-symfony_18.0-1_amd64.tar.gz: OK $ sha512sum -c debian-12-turnkey-symfony_18.0-1_amd64.tar.gz.hash debian-12-turnkey-symfony_18.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmandZAACgkQkPLGHN5q 3jfTuw/+PE4ouIT5O/RbfXxDCELgsTkg1ofQ0Gpy2IWDLppv2tASKZwIsKNwUEna 9JEvztRDMS6u6Psio8dICym+C6HF8iPXKJQydjTCKq+j6YUqmPbMqoZX2lJmVLDg WTCicxAvEleviipoIUnXuRUrWqRCaU8wTIeciPrkT6Wrxz0NOJ3LCEYNYp2khOkz JB2ZMk37TAisJ4VdkxHvogmTc1GdB3Ss7tm9utVwKYGU4oJn4thjATQFCNanq5ve ks2x2UsM81g8lp88N65Pwg1Dltb1EUIOrj8FuOccY6Pd9ANC/PSSf1r6DUE917ti WHXXgV0U58igBY79NfTEgxiVmorgLk7MGSSbyhjc8xeC9hPkENgALHYVbPeTPQUh ee2r3EJueaIvmm5PdATUwanPprYlPrTBGCUBKFMovr3+eYvFpResFdEzBaAVwD+h Rqg8SABcE2zTo2zAx2O4sVJjpXODC+j8goPOsQyYhhXvL8rskR444EHGxdj7cqj6 Vgkp1N+orFhoI/3dSVRiQ7QWF/I0vGeatyi0QVUzOOdQZre3LAaHDlwIAlNfQauX ZqfbRXWoH0kR1NygzjYEiXn9Z1Ow2UFwnhh43VN7BsQxFpUWNC74OCErKGt9DAMO oyaoYjPoXL2vH0n37sg7xt+5kUvVccD0ZiQCfz2GsKgfnCe2r2k= =mz5D -----END PGP SIGNATURE-----