-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-owncloud-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-owncloud-19.0-trixie-amd64.iso 1b2103d3a571bb3f63298cdabb9149ff3e4bfeb81f8efe8e00ee1505b734bcfe turnkey-owncloud-19.0-trixie-amd64.iso $ sha512sum turnkey-owncloud-19.0-trixie-amd64.iso a5132e895b5da9c3d6a31dcf9c5f548eb2c640688025776de18fec50becb56eee818b0f0798bfd5096d1293890e921a15c0577fd34888e68d6af484c769cde85 turnkey-owncloud-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-owncloud-19.0-trixie-amd64.iso.hash turnkey-owncloud-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-owncloud-19.0-trixie-amd64.iso.hash turnkey-owncloud-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDAACgkQ2fx1wp0K Azsiww//evrKDTWfbglgvw6sKCOQMxTIWI97G/GE3l4lhQDZKiea/+Z8FkoX0UBH ALnUFeCImRb6IhPfCIkHR2M7L8pDw3euloVziJp212BY4M4UoPM9dugbU+5ugeIh 1VAJGDviLe5rAcfq23wgTGLh3TbGigzvs3+tWF769pq0hkr8ItGFz4uFBoNJ9H+k lFBKNSBOgNvBpf0kIFWK/s4rTQ3Xjkx9sjnm715XtjCMp5RNfytE7wlFo/A/lCyM tScYPwDTRevcOBxmjn+i1H5HQHQt7QaIu+RhVDsk21NtODCVPT1pHTf22xNYp7QH WiHMmbC95j3nIXrBr9u+iSwUe6CBYsWXgm+2Oe/y7UyYJmCMG45ksUB75EuH+EV/ Vzc55A+542c4W2X/2CFBEOiAo/SEABf+qE3nafVmMRZGe8WLQSrtWs9Z8taCCld5 WXiYvJm6lbkNTuve90MGhPYWU7bVlaoWr22wi1W+voMp+tQZqNpdHpKVzv8q5H9h 1wHaIhOUcmArI1U7HToPAHSEdtFzN5PvjIaj2Ipz+uzk56ASKRalUOu6Qf8zXdhT nxaPGyfKhhcXK+oQH5lb1Y4yvKQ4PA3m5yv521MtK80Y7d7rB46shQ1UJu5etBwm XSuT+SLwmwXWRDLonpe/cjESihV1QMiguMakI8JV8YZhheBoW8M= =XMMH -----END PGP SIGNATURE-----