-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-ansible-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-ansible-19.0-trixie-amd64.iso bb01030b42c36eb25f6ad14d6eeed7e8c696f6b24ee90edeae10e153d0d6bec4 turnkey-ansible-19.0-trixie-amd64.iso $ sha512sum turnkey-ansible-19.0-trixie-amd64.iso b90ebd6d40108d618a71b1b789d7a91026c7f589e985f2474cf3c3c4c3abf574c9972e79735d06f3ed8455a8726410b99ccec20566ae17f2068385487ae05645 turnkey-ansible-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-ansible-19.0-trixie-amd64.iso.hash turnkey-ansible-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-ansible-19.0-trixie-amd64.iso.hash turnkey-ansible-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYi/cACgkQ2fx1wp0K Azsbnw//SIA6kUXpPT3pDW7uXvjkUh/fhKNyTU7oKAXUD90cPNziSRInKduPuSe7 gfr2fOPg465PzRemcaYGif4Wa8xJ+739spXQ5IltgZ/+nFv9TPDikacjky7x3KQ2 HQvw0e2bK7TgqXXLiYe+Rv/26Xmcj9iV6DhdtkBNVqtZ3j34RDcb7ycwoocfPLkm 7VfeI3LuWq1BkWgcbYpXnF+TEEGOgacBzo5Qyki18epSPb1hqtTz/4LxlEdoDgh7 /ukzOS5QLvndIixCd7cvvtb1B3iNIvNABQeS2HthoI5Co1pmG5a1Up22OrcTd7Kq 2vWZDFPf5xj9ED2j3xl3tpWG2y7XOBzRzO2cCzlS0NstRPIGc79hpET6lcaqASPI 2V14GcCWA03y3CzNfKJd5gx8pYDdIYKJoSI8MW9w4+X4afmDFfxU2iNEevLMu0+w kRJlTCivUG4jeLGUYEPnFtANZubJ7YROY8unKQDTIlz2i9XZY/YVKtwrTxx12oQs jlUXW/f3vKluCHFOoCjqpKzRDnp4hgpQQQn0eh93BGR9DmWtJL6x6GHcw5JJYqHe zZmek5v5s4h5jy1sS3sWKlt3oOYRk33JBRgg3psb9xnshDSu9S6vbLZn38hfGJan VmpTR/hhSZz/gK6tHhYnMJ4dNne5l30Mra4SghB8tkHBx7Egj14= =rT5x -----END PGP SIGNATURE-----