-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz b0c5ec94874a2177ce7bab88acb055d1b6fe5944f925537e0b40ee7b8877a385 debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz $ sha512sum debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz 7335bf3c013ee3d5e9f0ba07d2f1ede32c31f6717ac0d6428d172472cf780fd7c79a8782663adb55fd23b1c1662647a14866b8ecbfd77ad2515b8d6d705e0eaa debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz.hash debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz.hash debian-13-turnkey-prestashop_19.0-3_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrvWF8ACgkQ2fx1wp0K Azs4Sw/9FesGzZTSV0ruJC8dBD+yZ6ius4IyUYKCWHIu/awJDVXqF0/KZ22d8FX1 kiYTVbg3kBNc9mgG2Xrcabkxl0zBZ9nbTgE2ivR58YyaYogY9DmJ2F5Fx2xKPjay LZXX2aAV/9M73IrngPdKWDf+OWsFJ25qItpEQZWaLMyaHb3BoiJYTedUyCfWbEjl ssrZCblt9+JS9A4G8FNpA/2U66MaO1XJWM6q3bDlNJ0NWjcUb7Mj3gV49UvjI+wl DKya0rYvnZ4E2YKUNORAOVNRdgG2XIQ0sbcqmgulE73RSCBKxuQpLwKp6q9H2OJx xKPBQKlApoubcLPEsM95/78WLa8hNyzJCSMrjaxMKjzPpDBOkOXHrHU0+jH16xPd 5NafVm9bddbAE4uag7ZPc5iyk8kL3KXFEI1k6TKj0BmI91DkM9ZAkubnxeEsj6EZ Chf8ie7hzABPNx7QR/kh+N0BaW2r0z+2+xrYydPXVJcI++iSoEo0/nc83KSkY4bf Krq/v8wxhpyRxGcNgd27iMmKDFegrV/p0AxNxm5qbwS7jbnMx5mbjL3yHcwgbo23 gtCrS9pVkxbG7ea9/U3fPlNHUFa/pLhbFYkK4ssa8EePca4oQCmAjWpfCtAcf4lG Hqf9y0lr3FH49CNdqraEd8DLzqofRkAxWNlvVjxif+k1mK8mAG4= =xfnt -----END PGP SIGNATURE-----