-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz 52bfe756c60f0edb99eabdfafee4da143c5b3342bc6bbb8ef30df9304acf44c4 debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz 0d69fed722eb17dd4963246c6100f463999d535d1aaa0434d4a54c756246d3c0b6903a96324e03477b45933d162683e40ae7c2aa19d3f2c4461d11632d043e26 debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz.hash debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz.hash debian-13-turnkey-couchdb_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre5ogACgkQ2fx1wp0K Azs+WBAAl6PvLdFi62GWN1P4fATS6ljODPgYANRrIWFRWpaPGc9DNup/9Ma44ngd 5PC37oNVRY6Ae8bEPsEIXbBvrqP7uQd41wXn1E4guPfgFTDT3vYHX5YMuXl69ihh /Bb17/PXaxk5sl0UlkgFiAqEhRgf9zEQ64U4KORg3XxI8RvSaTEIY4nV+ubz1F2B zSXgAZEBRAUPRGr4rPQwmAtIJ90Sig0F+5KARVHintiyx0pbicp8KPo8Mjo+uETx cXEFjSYh2ntbNPrKFmUMAz1Js+8TyAXrB+woL7vmw/YH7xQheh0bAU3oCQP6TPzN VNsIRHKospyy8ZS98RABy4GqlFT3T5JMHWY38Gf+63LFZRc6APPBaDvC1vVC/TsP cu5dUtaBAbG9EPuhi3GLgZMiJ+W27fekbhWceTms9XFzdxCqHDdPkkWbf2k653i6 VehyCdHyDzsAepyQ61VBujstyk3Vqhe4n6F8BIPdU7JLSRoEh84saRqpGIzWdlmc elbAyIiN6ALIKbtLEugFdchaQRyiB12+mEmcGwhcd6Q6cveBMrfAWuPaS/9SaaPg HDb5UG52gitA2azgGQfV9VxHWlnIfRejrDx9R1CVAQ175FLgmG3BqDBCWl+64DFp 28eEN+i1wNe8iI0gW+U4LFGLawqCOdoQHvurStCOzcBrj+rXb/A= =TCUY -----END PGP SIGNATURE-----