-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz 52611b7836aebf57503d4c1cb6a678188b1f68e73e77195f5ae35f9ee91eeae0 debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz 1e51b1cec9414524afdf4a56eaf570a5c91896341f0bdb3e1daf819ab2398703e461b7913bb344e71f50f76c7e7122fc89630252b11c65e982140db42e246dfe debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz.hash debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz.hash debian-13-turnkey-prestashop_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre7HsACgkQ2fx1wp0K Azuh7hAAoDw3PEjStGFk/wAG1Dm227x3t4lz8cecTCPxQgiR0/t2rR2rTaplL3pL uKdiVc9wIbseRw7evD5k1Th4lM/hafh8zyCx8M9tJFe2TLp6T88NXHE1lwhVdml7 FJ2SZ+G+2ZlthmTGNkn8AXChTSGLndkD38t/Cwd0Lx3WiKJMCtLdh6wCKwcB0tTb 0t9p1kf+BDf0vT7Ebddh5FxZi9tDv1xFAYPVCnYS4gIQN9ZOXVskGK57E5hqd+8d akBbLiPBbNppn2bPfqdHPv02wtbh371hJmFLWyqjJM0LzRLx+hmeaUTamaeoKJFf X3/cDT9uqM8j/jwUPK84k/mG7PTSYIV6jjqL0YNorswCUxWgbI5z7F628x2OiakV 6HH2ytT0SfzWEEA6AUaaYicxifUw/vPk6cqr+UD1x+rvCS4s99m1njh5K9aLGDdb 6PHn0dagw3mH/ZkKnIg+RQa1UNyxbidrq2eML61ycYc6gI/RFW3tU7oc+VftwDEp LlEWzRhkiP5aZ+Bwasvxhs3zYZUQjIsIUZiQi/3GOG3fxz3MGXkq8/lHBj+05qIw 2DBal/onTw4kbPh5VEnIZLe5GE7UopZEiaHO7REzvbKeRl0y06woi1ceGpnlLVJ5 RFn9OXRxQClDghhgdRy+i7E1NskiftHfeQQob9MhRQvhXEItQ/I= =He6x -----END PGP SIGNATURE-----