-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-processwire_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-processwire_19.0-1_amd64.tar.gz 1b83c858818ded15fd5987982f0b4f0f4fca00e4e9b062cfb34913da989c3f0e debian-13-turnkey-processwire_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-processwire_19.0-1_amd64.tar.gz ce41afab1a1305a98d605d2eb93b0b12427f6d1a72aed5eee1f022b5a5444f0cf826bf0311713ec622d97442ee4e8dd4178beac28b9b1beb0a9b1188f5a13455 debian-13-turnkey-processwire_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-processwire_19.0-1_amd64.tar.gz.hash debian-13-turnkey-processwire_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-processwire_19.0-1_amd64.tar.gz.hash debian-13-turnkey-processwire_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre7PIACgkQ2fx1wp0K AzvWfQ//VeKQDq+G21BqmUPWOu68MWmXtpzqf3ApJowL70lVGSISyks1wcU5KXDg RYaNLHiCDN7OlZPYPj8MWS7ALJzZjRjY2BixowRBfNbkX4ZTY5RvILzB18ymDNN9 2wrkFya7AgwJf2/PMZyPYHu1m8l50G4AYl5aVMCrIZFO79ULMC3Td45tE2cFBN8F xqrTU1s53osrsfdt+RRVMTFQMkSWncChBgiQK1LnjWFaATbOwf/+iyubsjSOfRBm MvO1hkvt5ESN1Yam5Ab74LbWZY2fVzSzKWHpcoIsC5n1TbUaaUllN3rWrBVnkJfw OVs6qkx3FJ0H7H6wY3z6rjpxk6Ns4Z6jeD3I5XsoVv2rphPLv6hMjCbLe4MCWixf UemY66iOrXbz6x519Mg/FO6J9HRZ61DK27/JhD48qrYPXmsoSR9dfLvV0Ib3JZTi Rpqb5WJz+mFbbre/ku+uQkvzOg7xAjYuW6VpHZMc3zLcO+qFpR/sZ5kEdbXCCZgX yPlmX1T8MDebuQaD1onHyHUeG/8/dTE5mh5Jk3KUIYC+bpqvWe9W5w2/FCpuElC2 M96oo5943PYmeM1ty6Ofk9Pvjb0ij9Wn5vgWL7Yw1NLpnV7OC2tRhMOWWLRbxeyq BdMtwYH2KMiYAcyeSIWaaIIPS42+VscmtFcfGvCdNVhjw/wpfTw= =ZlOM -----END PGP SIGNATURE-----