-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz eb224c8dbfc0de01534ca144cd0c90a87f7c9826a9424e2f96402aa46f21158c debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz 67e65cf950bcf2957ec165e97079a1b7473e3aedaf03856f93c8ec62d801b88fdc8084e05bfa756a4f906fc86a93c219eaab3c3634e2a42ffcdc06e419157da5 debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz.hash debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz.hash debian-13-turnkey-gameserver_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre7TwACgkQ2fx1wp0K AzuUCg//d5fxeb7zQommsOVY80yT32jH+/ZGYo6xxeYn/wVoDGQl19mlqgxxrmd3 WBvve5z0j7+p+yT8jXkklbUgBw4+H2xJHlCwDPm5bPYA3wFai10Vf0QPLpya7SXz tvevbG2swwb59QiwXvRlU+xPNVGZ7pRM3X9k85rBT1m72D/Y/n1qSbLx0ku0+2zv VtC8tBSPZQEGmNUQ1eEZT0rUEp8xKmBFYst73R9kLn9puXwvhLElV4ydjPmy1g03 Lrv7rgx2whcJJdbsJ28ci1CGNAz65HKoX4sZzZnhy5aC/GX6jvqGJxf1d5gU/EXa GFapeXXsKtL8N2n5FhU8OIk6KyiCsUKcwdjv1hUvdzo4nfQ3E5VFdBVmTGoy7N+R Hp9P0awSSFicEnLwW8Xv+M5tYdRQ/tp6HAEEVUA99rTnAdilQZJt/hacEa1RDVkC ut7Cy5AQC7a/AtpUESX4nAWM64Fis+Ctu+lnb/He7oEeteA4UwG0fY4RdnFBI0pg Y5KkLuPuw9DvLmTD7W7A5StrHVU+73wXFnaiJAfdVzbdCdYmJw8KeHmkbcaYWC5q z653pptVci/a7OTOFU/IP9gDZ+E/6DURqn/YTNcFGvpcwBbp4ItxdsiriNkhfe63 XENA6CsVp5ne6xEaZZS+nEDoPld06sGPe06YSEfogYamNVZsIVg= =FzTv -----END PGP SIGNATURE-----