-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz 241917a8876eee1a950de16dac5c5fca307518e8a274d737b88c258e02756900 debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz 6bdde54f1a8e7d08552b40bbf7e77f7fdf727406c25780de2ce5c99be2ad282f9f49609276e5a38e54f71bc02c9e386cc71860d1d280a0656ca074b1d0ae3e8c debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz.hash debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz.hash debian-13-turnkey-nextcloud_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre4qQACgkQ2fx1wp0K AzuE7hAAqKEz5Aevpcq14G691PzTnaio+uxqg5roxTqO0f1bOIUv65n3dRnvoSm3 V0uZnt1nOb4VtRrlb0JrGoeNQT/d7Mjurk8OXFWHK+ZecDPGlALUmSURLmy4Pbvu JPnM/q9xUigchlwjxTCqgd/KD1GM0J62wCBROj9DZDnXAl+OdGVJE1FKQNx0aSjo d8/ccuZent1mOftWXU4nmMlt6cVO0IhrCOnK0pXNjaaYvs453h9wu3V8MSYRe/k/ 1PK17rKc9eknlI+tCliK/wZFc7UAYqptzFEa5Gv5UBa+4VvEZ7DZxkbN/BQ7IqRA 4THExS6H4nbbRT6dMW+/90QPrM6pY1OK8iUoAsEGNE3C3YGdaViRmkb5yWiMAtd6 9FJ4jiV3bTj+wDzz21QFMaH6/iFLgBoJNATSKSRmBsB8HGFUiCOkHwJC0DJ5rJS7 QkMcxqN6hsFVwIHoLsx8kUY+pmYErsy5lkkHDoLbSPXbxhr1PEqTvVnaiH0j3CCb jV7R5w5380ijrKPfS5uhVx6RVpgSio5lH6uxYbF3CH5X0Sn/e95j2u5X50/xjDOY APCGwTNGKsyt9sUaLk6QKRFqmOtKNyNCTYyMROQyTmDqicBD0IscvRwbMEJZ1/pu Z5CiW34hCKr2YYFRWu0p+a/hBRIWYh1Y9nj2NN7CSIl12++FJmY= =ddFe -----END PGP SIGNATURE-----