-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz 4562ccc38c97677b63623da104c3831cc67e1c17777579e1d72e05d770a1f9d9 debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz ce38c40c78af700577efe5ddcc3d0ac2787b78b793044caee00c330bc0a3e274df5b060c70c83f896256b14ff6907ed7ab18cb7803358dbaec285bce20c6db22 debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz.hash debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz.hash debian-13-turnkey-postgresql_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre69oACgkQ2fx1wp0K AzsyDxAAnWC2r+YMAAbOQGZzjXfLytUJRCVIP9BOqqDv4bE7bSfK7uAEdbKXEl5A 1ncP9wzhMnkg48uAklQUnIBPJuTkXBDfJeLzNR5pjYMqyywYZ99KGy1BFVKxZPMT UFiAtOOVOvf/fTPm7BBwdvhRzwxNnCBvnN0+0eMIpOPGX5HEns6gh9XeFkHkzKH5 e5JkgA05BmsvjYdUBo+xk0kp03rXdrXZobMAg+KkT0IL3GfPxTv7jnoxTOCnMYC9 BS5/sk2ds0kV+PGEufcFKRJ3oDBkk24CcxElCv1DOeZwK6kTA+pTCoKcoTF0x3od Vor9n8cKgUFMBgdezg9V1bFbvedbdByq493EJAxKcPtQOi1YoFOe4wuKgvxAzBdA VfPNa6mq3ZAL72JmfsEdzQo3ezsDyhXTPyJUaeaUGX+K5QlLNXcCrMwkL4asdidA JowSU75wqirBv0mQ2rjhZ5FUh47Sbp3FcXsZNf55GbHIA6KsJ5mAM40tlLAt6d1d GJ+5GBBmFs2dLask0nBZ0wzZasCO9VDqvo48XFYFrG89nJgn3EJYkhUVRjUgdQI1 Xgt2x3zoQzWwSlZVnWQKzm+JDNULq9S2hWMgUQDyqvQfcP2Dwaj7kkDVxM+/ut/Q B9Wz8jwD+qyu5LLS0+6gYoUuIGZCpuUjJi9y76oNsbCvb/3gsww= =l+iS -----END PGP SIGNATURE-----