-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify tkldev-setup-bootstrap-path-fix.patch.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum tkldev-setup-bootstrap-path-fix.patch a6b77114e0376cd504a37a3cdb6b76211aeade53adccf2d44d1c088c553b7a44 tkldev-setup-bootstrap-path-fix.patch $ sha512sum tkldev-setup-bootstrap-path-fix.patch a0d3e25b78da994a7ef7d3a55ac95b8eea0794c722e4a0e43201f322c884d79efcd7df74e3b689c66b32edf3fb6ae2e2496cac0eccac5f08e265bff3bf86563a tkldev-setup-bootstrap-path-fix.patch Note, you can compare hashes automatically:: $ sha256sum -c tkldev-setup-bootstrap-path-fix.patch.hash tkldev-setup-bootstrap-path-fix.patch: OK $ sha512sum -c tkldev-setup-bootstrap-path-fix.patch.hash tkldev-setup-bootstrap-path-fix.patch: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgmjkACgkQ2fx1wp0K AzsmuxAAjilDv2wKdoD3/+0TXZ1F7rs65May60aWuFWG/2wW4LNnTmqCqfiv3++u IWxhnQJub4D6HzyrxC9CCSNQJhWKOyE+Q31RY64c75SwKynhsl+/X5BmFdZ9SMAY g8ldi3Ie6h7OagKhnv43Jcxg8pflsJLJp4mF1IwxPpXjf2oZx7PvF1fEFYo9HPgD fOKPvXI19Q57BWyAcOW2TG/UaHlfVs3wtsJIsnQqxJoQz9FCViHS5iB/jeNa/8hT kva6tRlrP/VKSHrsiSgw+Rj14Xwq42HQc2fzFxQhYCfcZxzZq+KN+XdX3JHb8rJS CsweB6D8p0J+DtJz4Wz7OzyBAEdopaiAL1FffNqR8HeYuATg0qk8QgjeMl8KfQf/ 0QxpGomog4GZhjNayaIiR1RkmcN5XL9Qc6bGM5wBWV9qTgQT/HP5mfJnmE81UQsc W+IyzR5kV6eUgIQ2xjDabJf3+MRy8e8oRO70ltOjOGW514gF9LSHwdCnb8mVhdkV rRQtZ9MP7xjLvQdi+mz2S8tVK8KKHtzRmugnm3CK5Z4gk7Ek9CmR6DueMO+NXoQa qaLdNEamzzjh1tDCh1Ly21bgr01ZMshwU3MgnGA6c81IQqjSQN3bc7Y7khLZ1Lvr hUkbsgTZTI4AxTuOPItR8vWzxQ/E2Fwk6ay2z1ag6e1/dMGEjlI= =fF8J -----END PGP SIGNATURE-----