-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-nodejs-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-nodejs-19.0-trixie-amd64.iso 56379390474e331cb090e009d9ecf48305f3092515df2914e3880969080c8919 turnkey-nodejs-19.0-trixie-amd64.iso $ sha512sum turnkey-nodejs-19.0-trixie-amd64.iso ffa2706eed2f2021490ae05f5c0c3b406a6660067f2dc08acb41dff76f4259d6b8eaf0bef0abdb515f660991f636c46766c9c426bb7d01fcedafcdb9fc308b24 turnkey-nodejs-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-nodejs-19.0-trixie-amd64.iso.hash turnkey-nodejs-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-nodejs-19.0-trixie-amd64.iso.hash turnkey-nodejs-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCsACgkQ2fx1wp0K AztP5Q/+PSdTEErNWhpYqxz6yO64Ot07KOPW1RN1ooc4ySMSB08X2je1g9noXc6d aEeWHqSzqE6EzfpFJVNeovGVY/Am/1M+MkPoZMbLE2N3rKHgHVwFMVtO/2wtyn76 CYDfGJLqQUKmuX8sVn++hLf36H3V8sTXLc4aommBrb3nn+gurUa8inqnndVd5lZ2 DYKFCxPtaa2hVNxYgrh6Kt2TWVvWfwh91hSi2zTSBnicOuNTezuW6tX6W/Qy0VLi w/zpouR4TMJ14mIFzmxyVsFmHj4Mp8VVC+YInZh9+KIA3UGm3k2zWs5fU9g9CkTB 42oN2Q12YfJ1BszHeNcfkxcfwjhzXWU/rRblE+ZVYBPr4p83Is2V7YWYhK+vzD36 5eENr268QgrbocBvdsYKhO1HtluwTnRvD75aOsdvMMS6O3MeZfnn6MlJ0LW+GXHl H6He8loZqahoEoUSPx8ZwK+vPEwVxFoXXNo8FZ3li8UZWbizppwSvFOvCzMjOubu xahJC6jVUNWyQVbH8QgmEQMFELkFPHj3vUi4ErIEDszrd3ZwVj4USpIZKUiYvr5m kBTx6rdid1wzWf85JcOo7rGNSl87AaryVjzTPi63jCXSD2MsVYnPUHtq/NJgPVtZ 7lcjASuSPr4JIW+ZN4JcuofNKkCIzDJr7ui9mn84oBuYmKXpDto= =Ihuv -----END PGP SIGNATURE-----