-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-django_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-django_19.0-1_amd64.tar.gz dc75186651eb463ef0862695bf59cd6521ad39e45c7e46420b14f05530f3c717 debian-13-turnkey-django_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-django_19.0-1_amd64.tar.gz f6e7a23890c7ea9f545ee09aba773415b8e8ba988cc54b219634ed8e127138ece0f20aa3d47f1f929451dbe93fbd41a484fdd7cb819f2a4b678d3b322ffabfdb debian-13-turnkey-django_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-django_19.0-1_amd64.tar.gz.hash debian-13-turnkey-django_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-django_19.0-1_amd64.tar.gz.hash debian-13-turnkey-django_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre5vsACgkQ2fx1wp0K AzsIsg//WVnp72Gndw3Rlh14G972MndUmq10iMsldNf7K94OLJ05KJtRdd8dlZCI SOFT3//Re3yHrLi1owICdzuSdOXifyMQMRq/SeSKiDGbP2pnhXOgbwaueoS/x6xL RpDQEpLssnws7xBKyNsPfxZ3a2AXnFJDqRthAMU1kCF4c4J1HZUebe4Rxtqlj6/o Js8NTQinH2lPaaHFYGTlS5d9eD4ky/C7zPTNohfqwYWjHhNicyO0SwMtyKCxlpZN I71zVkvnNWn5BvJdJTaHNYu95FzTPJu6VoMiNOirrsvWi+HAGt8+aFPq5ERqiC3W 3X7D7TLKkopuk+Sw/vEwg3me6szS7icUY4rAnA6IBXxs2gKtrjFAOIkxtlVbSig5 k/qsYKBxKsVAcA/5BmsgOKJNO7AHAYKBh9TGBAxnRX9rgiVPzRpPVJjE457rhXMH sHhOuFXwG3lu1pJhwMz8d5JUTj65GyxeAUqDIIS1dylT2mDwKn6cI3Zr+9HCMNuC YuC16ShE4gJNqgk0oP1MGeVBHX55OMXgpxWjvvEFjC4haN53XooNdmIrhaevdDNq SknWxbMJVtWHiqlyTe0jzpFBjibppEJCevbtfwPIAvYwgnRhSoW/W3HDICuHFifH C2C1pB86NiZ9LgdcPtoW0Dp1JePGe3CgpNob1q5v9gj6tB28M7w= =T81V -----END PGP SIGNATURE-----