-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-couchdb-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-couchdb-19.0-trixie-amd64.iso f474a6dbadd116b032d2c88a32ce4d3d38fad0e813c194cd37edf39176d7a2f3 turnkey-couchdb-19.0-trixie-amd64.iso $ sha512sum turnkey-couchdb-19.0-trixie-amd64.iso 15c5b1d2e3d714ae899150e9ef85ca48169780e7953f8afcecec16c4fbcb4ced7f72e27abbd5a7df873b53f49269a0cd83a28c6f7c84080179e4ca6af4a85db1 turnkey-couchdb-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-couchdb-19.0-trixie-amd64.iso.hash turnkey-couchdb-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-couchdb-19.0-trixie-amd64.iso.hash turnkey-couchdb-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYi/4ACgkQ2fx1wp0K AzuFRQ//U4MuJK+omQLbvPEIHccbGZlw5swIQcdL/Rbm5t37gAP74FBALn6cLrOM CuUAxOg4GqmIpNQgmtSf8lVEz2cNRn/fzYj51bnu9cQtI3GtdQoluS6z4eq3pBVW 3+ajAIsClILfVONFwaATcA1PsTh2i24ek/OQGHqCxspTf2c9oiE3Tv3n0EtGJIOv KfvRXuawfRA2NU/uOjhI25wssfeC27dltEXYFSi5qHlUsHxnk9GI+WAonzoUdh2a zJBbHzVn4o20x+m0d17y1iEuRPW3bYzIhEvt9zCxSqmC4KogFuBAtSVWn9bk6xwi CxvTmzX7JU2SA+yts13XTXXmwyc+oBIv3J7EzBGh6efR2A+vfotJt62NaoqFav73 TsGi52q7w8HP14PsVo7sEA3KkWWmOWkeRtT8Vak6jbJO+yfkmUbrBxWiS5lG4bN8 Mjc2YodhcP3Q61v2RYd+XXJuJY/Xo7HDCkps3epDFQk35WfCT4jftszA7xuE1fHs W1CNVqkEgckcLHDEQLQ3DgHwCXa26rDB17sSYFR1nwshtsgzgUNYnL62XMIOa482 NZ9ER0uE8DX7r9wHhYKrt5NzKgxifH/kf+d+nlj/OrCH9KyOjXSCEv3sQgZCsboK edbwOdCdyG+M2GsAnzlpvBPYy6NKpDAtMGFNYGCpttve3OKeg3c= =AiFV -----END PGP SIGNATURE-----