-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-laravel_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-laravel_19.0-1_amd64.tar.gz 140a3c873bdfdbd544ab9db2f3dbf8a9ec24978663037a8c759601a5f15ad8eb debian-13-turnkey-laravel_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-laravel_19.0-1_amd64.tar.gz 75f4b2860f3b245eebcc82e7207fbbf9037d77ed80a0dc7b41908cce63557a0172cff7dc6366d4d3505f0affaab359e915d36cc355d62c3534c8bbcb9e3f34c0 debian-13-turnkey-laravel_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-laravel_19.0-1_amd64.tar.gz.hash debian-13-turnkey-laravel_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-laravel_19.0-1_amd64.tar.gz.hash debian-13-turnkey-laravel_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgIN4ACgkQ2fx1wp0K AzuPew//TzHYd8+pwm78WiN+4fzSFAQKihLqqhdIOPUzGb6mXI6nmzMXf4IpedU9 ecLyGzOubTzN9ne/l9i6v6eUcyFEZCndufbNkgesvj8MejxaYTCwy9VQWJLO3PQa YsWl5WVOBmOzfOrGCuOeXWWemyvnZGlGDIQPaRMGLLRbWbvABbCkBfYl5FeY8d1T /8/n37JAUkjs4ZFnjshiEzk0NICPxR58mOMOmYafj0vOdvTLvAc+AjYt/3kCKhv7 oBy26QrwmLuz0wEHGXBi5tBBoIeO6Qvw8M8oK6MmgwAb30sWhinza2Kv35asENs0 b5NOnzulIUJbYL+7ABuSsfBEVC3WDod9cAEpdeON0NrJhhW8KE1qBYouDQqwAxDY VttWUuXJ0dGCnQJ1Ck+GPYm/9/j2qcFPE8I3yPzdgZbKbRLc1QpSxfEI3LdFAXkC WluNF0mDE9lAx+w5hmoMVLNGwl7MOH2w3JfcNYbrY85eG/MaR0AeuDoylaPRrBhv ECPAVByccLuy/g9taKPfJ0qsdsLvp0UpOR2zJegWoLZKnFmTSRPjCmiFTNGp4sZ1 KTf/z3j6FfUZwYcWArxREHwQXEavXIn+OdotmZNVl/U4wPlxgVqx8qQtOi5TJfJl cAySVjwl6B2piLW6f80MTaK/vzrvMV5jSH9jVib7bbw3j67dzgc= =glhG -----END PGP SIGNATURE-----