-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-odoo-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-odoo-19.0-trixie-amd64.iso 9633697ebda0bf10c91f4d9aaa6bd3eaf1a8d1c64b7a572013cdd8696c824955 turnkey-odoo-19.0-trixie-amd64.iso $ sha512sum turnkey-odoo-19.0-trixie-amd64.iso e45ce9394e21196bfcca7eac101237635caaa6ffb8c1a382b91b2d599d920ab9efc052dd03c3bfb315db0ae158fdcd8e9c0f721d1e73bc57d838605c3d854ef4 turnkey-odoo-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-odoo-19.0-trixie-amd64.iso.hash turnkey-odoo-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-odoo-19.0-trixie-amd64.iso.hash turnkey-odoo-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCwACgkQ2fx1wp0K AzvcpBAAp0QJFXK3roa8SdouZ5uwfA6VeVoI5bo4lCF4USusr/wUI624odsISnhT zi6X0PElVJx6tU/25651/WECLMoocc9xvkoICjvG5WK4opPnZwmblzQQ9QYnsjXs ARsseQIlxjYmA4O3mYXSaRElBa2NLCR95I+78unYlwP9hV+6aK2jLu/qkCWiYSKU QipJ9QmWK4yj0TyxbSBQtQf7hh899l4/zjoTgH31E8umWKeBxqgsUO+BW6/ii4qQ qFBPyXOF9NkTggc3zKant4H+OPs+Jf+aL5ts7qrvsNXbcXUFqpikumSA0pIWTKfm hTuL25Rb0AWZcPq+2iNJ7E68/bGRmHhrCLCHO4sP4BwoUScNnkf5BhUenV9Y7ts6 wjGymQckYM3e9j/uNGtj1VasCax4tJvkskDxd9gwSIo4fV9/YPKq9LYFeGJk7hKX AQDj/r1ZkxPhxUhJTN+L2UkNd30MijIi8xifzOf7IjIl7PCGmsVuBwl8r1WyXZ/c op4k5T4v1amK4FLoqasz3zeQcS9hBpKjesV6YPA10v7WoXbyN9pRRHbOlLOBh14l Q74iSgef1XvWCen5G1PZsI0ySo7SU99K3fZ3AO9yp+jgobgyOFlCG8nHmWy/V4iS NnPqmD8fh+nDu6fbik0HBJ5l0MYTr3tfJYiSau0j4uKDDzRPCFw= =E9bE -----END PGP SIGNATURE-----