-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-omeka_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-omeka_19.0-1_amd64.tar.gz ef5bf1947e950c38418306365eebea8c5d0fe548be7ff46cc5a2de26f7c748dd debian-13-turnkey-omeka_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-omeka_19.0-1_amd64.tar.gz c3bc64e266f39f8aadaa0130317d87be4b2ecde1b93fd7ef842493c437c4cf65d570d770a428eca6031924dbc36da77c6471f37818660e35789aac3cca7187c0 debian-13-turnkey-omeka_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-omeka_19.0-1_amd64.tar.gz.hash debian-13-turnkey-omeka_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-omeka_19.0-1_amd64.tar.gz.hash debian-13-turnkey-omeka_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre5lIACgkQ2fx1wp0K Azs5ww//TolKX4/A5wVQIaFcIhVn/6vfCbBCwm3brlvQH/5IQttbCe8009nwcb1Q pZHJnb9KXTtBDdVXWY/X6ra76psjn0xbFuBKifibUsD4UuIqidQ0fSc61ClUqPQB MRwjuZqL1CuzH08w+TInO7yLou92dssGJomHIy5P93OfLtAE5uc06UKPxIDMrDi5 mVXV4WjXXcr+zKTV3VmrNYVk32f2wT6agVhybaDucIFGPQaO1MIWlfcVkCFifBBt zFqbHyvDvlql7iEhyOO2lF/tziceWIXuQ1E5tohQOA5vXv64b8sb1lA6JajupG9j K/ZIfRAr9GFvtbadoR+j+KGKa/bHXqp4RRIsQsg4Qwfnv/vV9VND9tk24yjUxxvs 1evXUuXgSyqlZ9oyV+iuM3AIqtdK2E1qc7/YydAQqMAHKFikEYyRLgdEvk89x2oz MIovYpnI7c4xTStlstNQS4Z53YTY3jUViLq1M/ENKlWKZ6HT9TF9JiYeCyrihlk9 F31J6GwOW7MRwAWXuMcBpaB4r4c6cOZazjbBYaPuHE85xgQjRs3GfXr4wvH2Wg18 S+SfSjJZ51LXjmhMhqqTvyujjDa4/Ij5sqBP7S09cHUxss1cYVKTFnM4vwAbcK4A x4+vAzay7ifz9o76w/ehk7d4ofoiX2uOeGTUCTjPOXdVQrULKFk= =p4Oc -----END PGP SIGNATURE-----