-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-redmine_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-redmine_19.0-1_amd64.tar.gz 37c1ffd684ac74d03399d0b24946006936116e7d5ea0675fd8a6f0c776bf6ad4 debian-13-turnkey-redmine_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-redmine_19.0-1_amd64.tar.gz 255506ea04d92fc9bcfb7948e351c2b2182b59d35caecb738e7c8b42e79c0ed21bffa2a45421baac51a9860bc26410694905569e67bcd8e3c569a67f718e401d debian-13-turnkey-redmine_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-redmine_19.0-1_amd64.tar.gz.hash debian-13-turnkey-redmine_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-redmine_19.0-1_amd64.tar.gz.hash debian-13-turnkey-redmine_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgF3oACgkQ2fx1wp0K Azvbug/+JmefZ0pJEvNodJyia+FuJBK0NRiNNIyxujCwrAy3F/m2lp5dSUQsNVND MxT5UnM01In08IJsDa07dh5yelN2n96EQ+RJqvQBmxK58FC+MfSYlKNdN6nAt9WD dBqzkycqrYp88zcsv8LDKqslW7ru7PPDrFJB+SPb2f6Na4uhgIK+Zk0sBlx+CfKg W7HkkGDURN3gaRnOE+uDrVoAoD4NRHcl+IiiMEJNxgiSBVayPJl5zXwvY98hnFC8 U4nzTv7z/6ERNhmtaaeGJlSxjY88aDb+BqHjF5RUQWhAFey94mKXBCRaDqTAI7U4 xyhLrZe8gdU4LPfBpEL/Ltn/E4kgewW+cdonML5J3iMRJgx5Q1fEgn5tvjdv8u3x z7ENUaYjZm2DmasEWOM/bjnI2we7U5UxhdDutmQNvlA7IIFmiH1Xi8jbzQWtWb1u w+ZeQklofASWHrl94NPfs6T+jXEHUFwDAiAg8ojHSATzmtkZmUc1ZNanLKFJQY23 mwScSZr3TmwkYttmw6CTzZXfZXjCuiaYIV/TZx451Hgo95S9X6UX00eGN/L4MoMt l/AQi5OiMx+asYxY4iGX42oojNroHN+o5SbejR4Kf1Qy45sU2V/iVMaHfpNkifQF CS87fAnXnrTwQ/UFIA6h2yfwox+i5Q600CY8APZyNlKfbH1SRko= =arUb -----END PGP SIGNATURE-----