-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-avideo_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-avideo_19.0-1_amd64.tar.gz bee6a180dd8136e91b88df4e6156267584cfbb99364a6f37303e918e16927bcb debian-13-turnkey-avideo_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-avideo_19.0-1_amd64.tar.gz 51bfb05b51b50259195d7b8e8e6d7ca2683a454cac1733c6ad59ab2336c08ad7b0fb83001c0064ad2e18e309fcaa30656fda19999d47c0b93a24ae09895d4105 debian-13-turnkey-avideo_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-avideo_19.0-1_amd64.tar.gz.hash debian-13-turnkey-avideo_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-avideo_19.0-1_amd64.tar.gz.hash debian-13-turnkey-avideo_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre4EwACgkQ2fx1wp0K Aztdow/8DrT+71IJpQpjBYect5TFsmmAzqqKbIhmwObpNgtTjJ8FsVNOa++Ch4lz UCXq0d9pWFa7Ye2nswk3QaaSqyWbDsRbOwppQ7BFNtgOo3wr8fJ2DBy8r0geJvpZ yrR+XNwM2Tzy2XT6jb8epG2tqfQyxDyaLTmvWwV6VAU61OhvIAe3eNMR/7EfnfDz sS1W7ijhtvOyxq+rAyDgDelTZyV54LftXgPsQWZclto1cahfTFoEkNFALQWpObJo LR2T+hg/7veAZ3hH8S1tU/WL6MdXqEH3JcygR9nVhsXUN7hf+/iOJ9eAABc5tSTy L7opSLoAOZrWQz03aOE1BV+z13tnS7B+6Y4ClDxrFR/KMESctF+nbfTOKvVFpF8X Xv5Berp1gzKOmEZsP0KSzRCV5JVw7kGqS+HkYwRXTjyb0BL7z8xrzlCV09H1/hWC UR9iCGJSomsBHdN0RomjioLhUaCBemlA6slMCzpGE+Dv3XumDlDp6pCrOFNVlT5H MYgzu8XvByJzWnkLo1OkyR12h0A4EZ8JJXuXTU+k6HcMZDJXCOWetgEbOoyPX6VC D2pXO4PLmdk9DBkjcaO1Q5O9mSNALsPWMvHC7Qkou1W7+nhgP5/3of1F2pA3A9hp oLjG5hWnY68vWZRt3wye09vD0Jbei/KX+kYb3BAl0CbD4je2pgg= =Sr0v -----END PGP SIGNATURE-----