-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz 5c1c41fbe0241fad00b49c266812680014440f277656768bc0c42574ea711e87 debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz ab48db165521bf60be08e3cbed79fccfe8430a6fd2ba621dd51a03d1e6a60fac6939825c6792cc4e9b783a35856982703f032f471224ad4ca1c1bd9c8d67258d debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz.hash debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz.hash debian-13-turnkey-owncloud_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre6jgACgkQ2fx1wp0K AzsoGhAAg9tB8E3Z5Klv1O5GwkEIKn5ZxGYfTaLCSKqn6mf+HZEnI9Lwa1lpQv6W 6fSH5QXmxx6GoFwWWxUTnwL8qWvMdWch2PKT/H5zs7NeI35aagouTqqvrr3O9lnd 8+4aj5JliZSghY3Y2IbBRGm1h2Ahl5AIuB5X+qnLqoOOm3gmMiWM8L4IZRjelSSI V9iSFhwqUrhGGVk30vP+oCHbk4B++3y0JSnP0fk+0tBkzVU7HSgREkWJ5Cv6raBn WbT9KLCiGrYCLrihVg7V3b/ThgljHq2oAWd3DfY253OGcz5rKCUeBHISCXNM9OnQ 7RL+Py2zcJe3Jr4qso1lmWDrls696zblYSlBrg7C6QmT/UBhzHSyrshL06BaO0mA ognOSdctJcGzwVFX2VdUAwqC6a46sEY03ik5qSQOeD8QTbq6NN3b0LQAbT3fNK/f vcwpSsKXh8opfIriVg3BYitClCgYDeRwSaJ0kU2BC2RWdVF/P4vmkBxYNOxYmYPd ccv/uFmHa4rF4cTTwexpu6xxs5gDjiZ3FaOSE1Y4NKoqsxGzeim/ryU4wS5BNkIj AprTGyviKlBSqQYMhB6AAFQt56l/VZD6dENRG93ewNWIFJJUhJkHDIhyZEomm3fm 3JXR9b8E1VIPw5xyayKVIREmi+c7bpX+cAvM8dg7Dthr71EURJE= =t4cp -----END PGP SIGNATURE-----