-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz 967723ec204aedf71a2774c4bc855f5501088434bbd012f7400fb0147b631738 debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz 162400ab504416d34aac2f51f87e430cce1df9ebf84972c80019ad21ba0713ea65b1fbbc8903d90062731f44440198b1fba48c6fd7d226296743e4cdd76e4c06 debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz.hash debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz.hash debian-13-turnkey-etherpad_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre6rMACgkQ2fx1wp0K AzsyKA/+MUULIlaRpOF2OLzW9kDkOis/LoS4PjGfUWpE0C0j01ctP4YCvQxuvfMH 8tPlaz+oJod9/NVVxD9ri/jQ7h6ZgSOCnqY3wdpV16ORzjy6WUAKJPVqqFAgMZPi sy1XQVZUR8o2bfWbBF43GTJDbOxF2HHw76RCAX2+DK99pfHClxKJhAS9QL+ENKb/ Cmbd0tqhaL2rbiVOMkHi/wzAmC4wz62b713R7q80TEBms6MdLOyCeR9QgS5h78d8 uqjqpyuTUe+SsqSEnVB0P3KALbiZz9SklETvoaXwVC8+6eq113d8/N2cjxbj0pnT cyjy/xsDVc3o7b4uGIRxkvMT6WXG4S7F3XcLcmDx1m/bjBK+ze7UkmUwl5pAuI8W FdBtHWZUw25XMdwAiomvd6IlyFs1J8NAXWq9Pi811gbJHwzeqcuLA9Pu/+4kiWsb GeYmqGVUFix60lTGZNn2+q04oHMpCLr2FT4K/8nSWWfMqeZXTXo77ONsSbvgVEI0 ymUDrVN/w5Hc0HjYaGCfxEBVhj3q/qK317YMdj4bsfCkD62WsdZlbLetWnMoJ40i BifXDTJDty0mt46eu1TBR7GNY9N+b0nWjcjCSWVXY/2w2hGpVQMxyeaxJtWfXj2q ZWDxf67CfOAi2Y+/P7nQcoQaZdL6zOW7llqPMw4g/uYgDxUhlJY= =TVxa -----END PGP SIGNATURE-----