-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-drupal10-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-drupal10-19.0-trixie-amd64.iso 1f7be8593e1da3726bf56b488199fdfd3060a86fc88cdae8229a5d6a5427ea3d turnkey-drupal10-19.0-trixie-amd64.iso $ sha512sum turnkey-drupal10-19.0-trixie-amd64.iso 2ba77f990f26e34812bdcafe04a519b43cba9c03648a80950f04eeb92336688eb5a621cee8638ece91023b88436ed1a3d3b798dccccad46546a276a7fb287cd0 turnkey-drupal10-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-drupal10-19.0-trixie-amd64.iso.hash turnkey-drupal10-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-drupal10-19.0-trixie-amd64.iso.hash turnkey-drupal10-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjAUACgkQ2fx1wp0K AzvG6Q/+LkchWu9wOE+Sfd2HQkzO/rj/gWhYK1fTRqgHYFfUE+S69MmzxT3XJudP /zmWwuhOCNMl45xlg0ckLYHS+fabKX30H/ha6YziJidlQ0jFPWf2s+6dc6aaGud/ 7aHvhn0WJYsHYPeMzlrIdMEtkHXEBeFDmPLsx1qP/SE0ePV5zu9f5mZoimZtf1vW 4neIwZLHTjlU7yoKKLHuB9r7YaK+mqb7trs12V+GKp8NGZc9xmcSGQLqfUQ/L4ZT qowRe0i+t6s+UF7t60SqfbucBoRLKNcHnH1IXAzElbFQuhOt/hzGrcnsOo7KkP6j /ONYC41nsUkIHgeUsjOQPzR61kQg/5o6oI39if7Ql0buYHf4Fb3Qu2MRbl5yb8Er Z4Gpgo/rwkdEqvcpaNKviFT0iGshtkPgm+QIkfSvtUKOHSJKYka4rHDQyqx/Drip 2ZCKaMhYZEFo/mJQNlFrq4dpQy/Kt9azsf/ME8jAGgdTgXLyq7d+QDHxy8h5Kxfl TbOdihBqLrSuaAwP4dZNRUdAjiskd9J48ivXmbZq5g/ksaidxYuHKbTEfE583qTN 3WMkAn+NHMpWQELmcXhb39mOInPwhkEsxBBzNO0scWbxWfn5ZL09RcL42WEkJq2i sTBnzf49mGPS9s0NUeBjui/8QdfVuuv7GKkhqzMXjoBmY+vo3lI= =ozN8 -----END PGP SIGNATURE-----