-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-openldap_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-openldap_19.0-1_amd64.tar.gz ae811ad6f63fadd7b048f62b43e4a517cdb46702b55db7d022525038ba701fed debian-13-turnkey-openldap_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-openldap_19.0-1_amd64.tar.gz 4a8fdd313cbe698dc19bfb6fc62a9fc1e72b6b4eea9371059dffa8929eb462a6834d927a766cdfc42d16f00014cad2493a882f93c0bc7cf084873d8eae0e49e8 debian-13-turnkey-openldap_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-openldap_19.0-1_amd64.tar.gz.hash debian-13-turnkey-openldap_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-openldap_19.0-1_amd64.tar.gz.hash debian-13-turnkey-openldap_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre5ysACgkQ2fx1wp0K AzupBxAAq7iz/OjZU6CSk7dzH4oAHsDArGykla+zIHfQEonqrSPuS7BcXDqBaohK 1Csm+mZKbNbckt+UJafeAxOxr+wDeImhyP/EKRJYIusnfn2EXwkoc+IHn/pehvKh Z1EnbixmNmJuRxTx+wMAQ4ebRysiVi90jl9rPja/0bs92HsyOF5pCkZNUQvWV/tP xoYwlJOT/JnIYQl88OG1dDb7fdCgm6dzRLx1m/Yi2xOxAyffLja2Eoc0GmGOeONa rGgsA+tQdzS4oyeUWRCTfVCCLA0KJTCMpQQQG1aS/XRGP1EP2P5Ox0HLA+gJ5afP 6NimY0K46auFt20egpSJ9LY2HBT+8RGgZM/ofwxOgBNdMDq37RNf/Zszhj88AmUm izCZfiEoZIdZcodHEPvQiysq9KJC+e0b7hbU8OeRl9MxOq2KGhk6mcxBHPMvN7y+ FDvvpFOoG7KGWj780U5J+kOsLAO3aL3MW9YzJViOo0WcKpmssq55CjgFgSQ2JFfP bl1d+PqkxikWEGW5I777CmkvXJIA6IgSjwbfdaGdDsekfIzQ8dbmGwrODHk/S0Ww toJPXWy6PtrAXWR5uEjO1kh7H5nxomWo8WrfwavjoITJNfzs07gWCoNM3qir5i7H is7zcR0sgHRb/CtI/mJnyv5P/uHR+cdjthIECo4s4Owj84bTFlw= =OsIS -----END PGP SIGNATURE-----