-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz 889246262028629f528901309d97efefc53bdf253f0fddf6c916ad25d73473f9 debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz 5e4655740c1bed1fc2ebf4d0a8c13a0c45147747dc1ad481c715013be2f378d177a73196c686c7c8f9a54b3e818cda2ab86c245b7ee583e6c8ea4eba86398419 debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mediawiki_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgKbQACgkQ2fx1wp0K Azvv/A//R1a1KrZht73XaL6OwLimZPa+QLtwepROZm6/nqwNvmRA6OvhEQIRpVvg gpNKajOilwnAq3For5aAvTbajx8w97qe4hsmKQoPYATAQuiHQZ2dwKZiTFf1Mmp7 HQXe8RpWC5PvYLcFB+ijGVPtfmBpoVJCIdtKht0g4RaFOa0dSRVn5MrbbEKPdzK+ 7DvQaP3S1B6vTQbjOP9SdhOXkHVKf/xg9L4sHxDTRExuTHg4JiaZt9NXJzmozjxb snzPH89QUaHAyD1gMfXhs5ke4pQ33MKJIUi4Kb9QSbcyJt7Wv5r/msF1GL9hyfEe jIZt/yZq30+Qv4thJ+0LrYhgn8dtTP+1ooB4u2JUHdUzPqZowj2DAVIVwj66E8+O ubm9tjCL6ssPFYYwhJLSE8KkqBLKOAAlSHgPce3l6FNJkDzwkn/009BLPl5j8SBP mgidK84suyXOtXcqJQxta4UphSZpRN3ZWO0gaq0OMXj9GuHYBtuDe9Z8eNBcHVvk 29QNHok98hjgQlj2xKFHXHDRnwORXgv/Ec3kqz1rZyfEq7qAcukaZPx+Wjf8UtXU UFbV7bavcpwfwG2TFwQOfS27xzbgLVQTrsPOjxF9VP6x3+6hfvyvbTD1iLuVu0rM HE28sJ3sh5ph5oOMXPjI9d4K1lHfajEFC4Vf6/kMZrIRgmtioPM= =eaXu -----END PGP SIGNATURE-----