-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-symfony_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-symfony_19.0-1_amd64.tar.gz f061d8acda2f6ba8612ef80ad2edf5303230398d3b9aec2c6179b5a1447e7f29 debian-13-turnkey-symfony_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-symfony_19.0-1_amd64.tar.gz d0e0d9687d59f233f093dbf7ae412b8e36b1ea52f5a3373043f00d29c036b6d01edd7613abebaccbfd35a1a276d611c57764cc52a6bc3e9b5036cf41c9f9f490 debian-13-turnkey-symfony_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-symfony_19.0-1_amd64.tar.gz.hash debian-13-turnkey-symfony_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-symfony_19.0-1_amd64.tar.gz.hash debian-13-turnkey-symfony_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgHk0ACgkQ2fx1wp0K AztjcQ//V8nToQz+yfqECJcEdB+or6QtY5PIOTFLl3f0Q5FbMvzqxfhB0rixk6nb Nvmzok0GDug6gYmEHo+AQ7iyMYYUDcKEsNA8okla4BINJIh67QKjuUsyUhcDR7Q7 MuMRYpCMj8SnOw9mkiyTMB9dcHFp/VV+6f/BuRFgFay0lJQoSdg0sIyWevSiyi31 k+uh2mxnCUyGMPQFX7d5aCA/oaLXglFKUCTBQDpb/CLcxKw1uKJbUFCtVqz7pGNE oPHyxHzh73Sb0KmqHYtN1OZBXc8vTU44CCF92SM1tJsJ4N9jPSXs9+JAf1OXZreQ gvhRXLY6oiLuQhokl+8lpW0eBNxt5sWggqRWwU7X7yUaqdppmJswOl8aV30NO6+x J/uLOPKq/NXha2fE5V/ipWiSAWY62UutzaCWD+5znDj7Q1rX5ea9YuaHcn7SOHgR Idnan/v+XS6OHapFrK3nsQh1fiIdHz8QHrcYB6vN7P9jhitpy2a5BuxlqED8kA31 wcVxj6V/VVyS0esrHS3H1Ds9b0AeDGJ7m/vxH0kYQvmao+Fkx2fFERYgdZ9DVyJi uLkWfk6B6/WtQtkgS/m9wxvFcUyYGLpfw23g3J5yfPXs1zfx+xRWX8JHYDrQDI48 Q6MCdhOK285nkfrA/ZQ/f4rXQzmXHHQRJrepn5JZl0xvHIDvXbs= =LW3/ -----END PGP SIGNATURE-----