-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org pub rsa4096 2023-05-22 [SC] [expires: 2043-05-17] 2614 7592 087C 0EDE 4214 3B63 7761 DEBA BBCF BA7C uid [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) sub rsa4096 2023-05-22 [S] [expires: 2043-05-17] $ gpg --verify turnkey-wordpress-18.2-bookworm-amd64.iso.hash gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-wordpress-18.2-bookworm-amd64.iso bcbdbeea2074a4abfa8dd4e704cdea1c5b16824d48426f8f72ce24b661cbfa08 turnkey-wordpress-18.2-bookworm-amd64.iso $ sha512sum turnkey-wordpress-18.2-bookworm-amd64.iso 5a4e276a8215ad425ece3719bb959ab94056e66d30bba405ea0a6c25311f8544f12d333f2909108d49b5242dcc92037ab6f5634e1698cb0abc334679b077072b turnkey-wordpress-18.2-bookworm-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-wordpress-18.2-bookworm-amd64.iso.hash turnkey-wordpress-18.2-bookworm-amd64.iso: OK $ sha512sum -c turnkey-wordpress-18.2-bookworm-amd64.iso.hash turnkey-wordpress-18.2-bookworm-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0achB3UVKiMsY4ckkPLGHN5q3jcFAmbMOMgACgkQkPLGHN5q 3jd/qQ/+Ibig113l0S1wq07NMWfZO+l22JdG6ecRTvIqLSwWtr1+ukJLcYG/iXUR TRWLd+N6qy80v+FA//dNS8MkJ2cLlkXzWR23NJX5Mmm4auuFrAbKZZ7rsXt+iqCK AJOxr/kWF821toy3CBc1mF9KOcFR/hmKEdWVlh2jpvMRtTOoV1DlK+5Sfxdjv9rg WQvV/bDAuxdpMhaiEeKTJ4F8TQPehNJnAZZ1tUshYX6b+hnV7rr5kJVCFp22KYZX 67rH4DqIFkm4ksBPzikkXXktU23I/rBRhON+hLtRhJNeBixX4AThq2EQzJ3Tq6sz PmuoIxadb+M1MFWpPrLtBZLh2U5IbW+B5+y/U0sLufxUp3BTCbp/AMSpKF3rsRRx wLQ1kJpI3dVP/mRZjEF9J1jJuupAEnRSxQVdUtM4bDuQeNbBukSx+6+WqpFfQXIl UHpPIUP7vmhKHEiBVQd4nWkrLRXgyAHz5kMkFfRQkBfaPZ+f7jSjL+s7Zifs3H/b JdZJCvWlbQVC0Tb/9ZxCkiSWOBZvA0ZGfKSo4thJOmqSmw0LlRr0zmJk1iCpEzSb K3icKAbI+tz6ldqT/9jmg9kYIsUcIldHrBRq1khCMki39IMZOgFLH9mc6/u/lZqw lUSG4rgKyoO3kI/Pcsq2/2xdFtO3zmS91odf5Hoiblx/u+/94V8= =kvIo -----END PGP SIGNATURE-----