-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-redis_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-redis_19.0-1_amd64.tar.gz 863d35a11d2fab7d2876a4a632f51e50d7b875eecce76b962b3321a81bb81785 debian-13-turnkey-redis_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-redis_19.0-1_amd64.tar.gz 1e17ff554a603fd5e885dd218e4f89b6efb10994d565825d420af3c6ff6d3a8f1755b8340d90e46c379b2d99350c4e1f536802be0b40ecdc2181c8576675d61a debian-13-turnkey-redis_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-redis_19.0-1_amd64.tar.gz.hash debian-13-turnkey-redis_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-redis_19.0-1_amd64.tar.gz.hash debian-13-turnkey-redis_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre7ggACgkQ2fx1wp0K AzsRog//QUA6UreFaE/odIMNOpXJOi8EH6MWAPz0S/t/MBp5rIWUfIHNddxyekCA 1t0tyzGFlEOVEjagercuGIrqfCkmgJhT+E2HG+qQ62DEpFTSkk3ExfPpOeKc0vF8 nLgGrYqMlPy3Yf9bMVJMypvzf7czhW1TbZk2pr1AFOq3TqWReexOejm39BkrhnTu qISe0iMUtCbBB9KF8zOevcFcvDSJ1OuWJtAkHsMziJFmH6kqdgwSaDrjuDdTH9eW K4k+4ANGr9PRDSZxC7pikphTEtz80zZ7RMRlk+7Q6/1YU5VlwLZ5WVrpZBqsO8ng hXD+FLwHtPTkIJSqYWou74Ggf0S6VUFtpFQMspPbSoipfZ9+V6M89Dl6WaQcfIDA imCxBOdaS8YX49WdFLqsvQpAo88hvUrvq09BwsGNRwtRreszLPhY2vlUssil602C AUEv45ods8KxowBLMh5TzxjAlS8nS1GaiA19J6DiLh4WHNW+vPl1R81c6tG38qgX etChmLLSiR2397sHNqXbKf6GO/6sSDQfeiqAd8J8ZUdavaTRa+Imi9mGtNdtVWOf 5HSb9aWB0LWw7ErkUwk9ICHuMCuyG5G+7m6lW2NAG8iDs9H8UnSPZmhUkEDRnvUB IcQiBY2TBnUIQpR2QvfPnBJKTw4965poUhG0+IbMMMInK20+D9c= =KL1W -----END PGP SIGNATURE-----