-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-symfony-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-symfony-19.0-trixie-amd64.iso adfa0c3c0d1d6855405897e45dbeac7fbe786cebce78f546bd4e82e0e2ce1f3a turnkey-symfony-19.0-trixie-amd64.iso $ sha512sum turnkey-symfony-19.0-trixie-amd64.iso b827413b228a9a283045aa3bb12c30aa81e953cb2174747b4ae60e5f2cd65aa1495af0991c7243128f919dcddfda4f68acd2c681337293de1870e94fb12c0e83 turnkey-symfony-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-symfony-19.0-trixie-amd64.iso.hash turnkey-symfony-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-symfony-19.0-trixie-amd64.iso.hash turnkey-symfony-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDcACgkQ2fx1wp0K Azv3tg/8CnjP4WHckTagSlKFB9RSgG4ht2E4jDG2Q1DHmUR8jNhUDJjh+oWqsFTA L3dxpNMGc2YNyto8arbNwK9e36WzZoczdZB1WoOfjVN/Jw1MlgrrafRkxdcLtaJH tIGJMka3G/Ib4xl7tfc/iIt6gghVZEwZHXiDEviLZSXaV2r0s6VeBV/schbcvirL IBA5iVtOBGtRv5ZofxjS6zhhmZT+AIVWGsOynJUCbjGDqcRRh5xhFGr2WkQFSQZe yjLQArfns7LAKPqEkwB1BLOFvkn+wq4qeqdHwRYcdV8Ey3AklOoz+Ihl7rXUnnHD NU4a8QdlzkQ62iVKGuNLAjCt4MKyWpbicre3XhwFbCihilwsQbBZRn+7gpArWqXb +mffEWJ0z/NDqqO+/iU3j8KsNeedLXAf5SwRBkV3WSHzI85Zt8qJ8lJfTHIgClnB Y9tEKNddaGcs5ljn2JuMxFQdWnEqc5hsFzst/qjnq3ne67r7cqgYV9bdM2uX8hWd xGFdguERVd7uGB0IzvvrecvO07oUhSoGIt6DmBSBinV/igCSn1r+kOhVzgWNO+HA gnM3zcUTJ1IItucLLjbR3qmh6dE5Qm78d+P3sUMu911jWn258idYWrQFgqDhY6rl kZmvDQ5uMJSEU9DVRjDM1MEkokgnij5YQpqfHFw0yk8fhsWHKdw= =O7Lj -----END PGP SIGNATURE-----