-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-mysql-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-mysql-19.0-trixie-amd64.iso c1b08bcc60d609aae9caded085163b735d6be3e2d2662abce95e5624cd9143a5 turnkey-mysql-19.0-trixie-amd64.iso $ sha512sum turnkey-mysql-19.0-trixie-amd64.iso 55e28f1f976a6542a70b4087ad26b251a55a23be78cf3fdb06f4078e588cf0124eb3e1995cb506130b052a74ad08e2cf56d167a55863c37c2ba97558ccbd7ce5 turnkey-mysql-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-mysql-19.0-trixie-amd64.iso.hash turnkey-mysql-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-mysql-19.0-trixie-amd64.iso.hash turnkey-mysql-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCgACgkQ2fx1wp0K AzuvEg//enIDKutyotKs4XB4Z9JEaKPkBlSKg79iiTdT4MupteackELmoj99e0Kl 98A4+GCLO7up0X5zYW5Ie7SEODaDPfhE5eC5Lo4egQvRDsIitEklnFXNx7GJm3qK AcCT/50+ztqib1dQhso9h+jak1ePwfqxTKRT7THEGuPw40yRV+M9zVUG2Io/l5kP ZfXC29St8Zy3D/Sj+4NK4eq30iE7tRUUErlhPlkdgasMQJibrgy8cPT3NjfMBHlT mgEqbLRN7XPOMQEfdwCYiS/lLh+xFbWkl6ahMObkrehNc8hdaG8Eu1an8knW34si eEkqaSkcmP0GzApgGyLqu8jmgQeR8kScl3gQajPSokyyxKvR7s9X6Y92GAZLoJB8 wolbMnrjOetU/B9Z695mwP16YenXayiZOPV0sQW5DubSpcQv9njn8t1IzM1dEesa BzuyJrMy+/gCK2ObXc91o2tJzRt/DcnQrLjyjuSHwBXBUyfVc+Viq3oD5ONMicDT ndov3WCRQO7/Lu35m4snXMJXrHyLQs7Kd6Mcf6R4usAmHjPNiQSWv2GYKgKKUliY 1+2LZPGsOfavsrI8retRqoFZxbYkLaIFz1qXeTmr+2BgjnewAo/XYhZSDadcA1HF g03G1kdJ5Tbg19Dq4nncZKf8Nsj3c8+a/qU0JXpdbq9RiMrYuKE= =PjwG -----END PGP SIGNATURE-----