-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-mysql_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-mysql_19.0-1_amd64.tar.gz 9fc4c6ccf7e3bd63a6344c0f97a791e32f8e180afba96e61067bd0cf709a5156 debian-13-turnkey-mysql_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-mysql_19.0-1_amd64.tar.gz ade76bd65076f72fef6e847d0b3d7c58d89df743b60d650e4a0c997c2c1cc5db0761342213ee7d5ffc80639f2403e2b0216fbd4fb933deb06b81ddcfe9fa770d debian-13-turnkey-mysql_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-mysql_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mysql_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-mysql_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mysql_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre4cEACgkQ2fx1wp0K AzuSTRAAm8XZzUd6GPK/3Edb4nnijBJWmwhV3tLkLHUaufWzKFnNxm9d7mSh1ynw ldPZYq2MgHLxcGiUWN5n5exe2Psc2VwJ1lvSAOZnpBCCgQYJctXVPFW2y/lHP9pa bDoXxSup7kT2p87uChYWKxUXaiKCfx1OZjhOmvZfwV2sSA4THU0EgkP+35cjoLYY kt1y/eXkTYMuj5bkn4bOU1UIa7gKXbzUX/lH1O6Jo59UP5y4ifp+6uf+tpmcZYtX J67rZv1dqvpPFdlRIRryy9vsCbNL/RyGVzmX6J4G3zUfjkk4wxezkWmkG3fHxlC8 252bGOb1s1/NyHs6mUm3V/oSxbuw8jZTY/DJZwINn9CZfHE2KRluRd2i+UUzd60h vs5tq95Dv/+/uCYaeymRjpzYmeq28ituGQMMtDo8E+MFeDVYWeYFTZjv+W/jPT4+ g2Hg7CcEOSsBpfP/vGuyfUd1XGfPn7eqiQs+QA8wR1m5HkQdU+jJ0XMNxzVUCDgr pYJe/JrpEl68JCmQZyOgY3/SUKdIfiEFle7Ts7j79MeWpo7P0a7BaRO8Hz7WKYKJ rFnaqZ8rYw2GXEjudW3zmtOsAxdYJwm90B8dNdgunbLuBCKj65IzO1hHS/FMLHzi moB6bcfbBPpxZDf6q9NhYFFoKb39Qu4QN2kINw9yEc9P1iTTF7g= =grUw -----END PGP SIGNATURE-----