-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz 3e06d547522847eefdb7a6ecd7222d8d361c0b6d7193cee9efade76d2ec6b402 debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz fd6a41d1a7a6b49faabbd82e59ed19163066f9f70cf573b60d26005b10db24bc46a43e376548308edd69e08092eea6b11d1473a850457a9329dd28e2e5b32594 debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz.hash debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz.hash debian-13-turnkey-codeigniter_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre5ecACgkQ2fx1wp0K AztgZhAAkSzoa/9LJQ5Jc9l8Ckbn8SyX5JI2p5sxTQc1ZA4sp3xeAWTlsiUdo11M Gq/MH5UPtZobldUzEn2zqOPaQWql3UbQPptanTKzDNaKL4ppaMAv7oAoXyKP89fo kRgu0RIZVn5y6IPDs1X6/8dRRpiEgmSXyU64VJT4oe3K4PG9cMXaFFisQ1jaBxBw fsDYjfZB8iQxJnm/ni3hObHRAsBxPN4fJrEmAgAdxOOIOgxaX0ez9EkuyT/yO75Y S97Avmq2WV1v6f2qmtVI4b1Q1QJMllJLNExkRsJYwlriOIqyNZvLtUSlwFTjpMO1 AZh/OVich/ZQjRG6u6Z/zEIvrPYzOCpMhVazowFBf3JUYj8hBZ9sZRgJxI8c3bcZ sVaVWbCifQNDqqSWAcKQwWHyGsK9WD+hxi7Fa4A9sDn9+8fgeOxscHup7h4yKk+3 i/xkI678zXfUzldwS4SICGR4Sqql+2Un+Y4uq6renLD32mAqB9iKU8gDbHsRFsO2 c5t//tHbMdHKdkSyi3euDrnQWdryIBzsd9rUGL11tg4uwQQckYCQmYoSt5dgLf37 IhrrOhfObuQH6fXCWIdiSCUX5wMJeJVdllMjMgJs66sZVwwKX+Ix/pN+SyBCWWBb WoBnXiXvKOQzGKWNbBeaJy9kuqPh2Ej0Vput1ZiEnQ9p2WNTzTs= =hRBZ -----END PGP SIGNATURE-----