-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz f2c1061d198cb020f73da725380850fe227cdd97b7d3d082b874f0b1f9648997 debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz c433bb680ed1cf6e248fdbbfb4555bba1fa6e14f9c8ab144e5932a4f312eaf0ea3b54b71bf06900e5743094dcd47be0be3238f242b409915837575cef6da0175 debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz.hash debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz.hash debian-13-turnkey-wireguard_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgJhUACgkQ2fx1wp0K AzteMhAAndi2PETjBSPc9mp304n3di1pywxZgHAGmh8+ANMXuOsBhovP19LfVkZh 1Urqj3cCfwzn0ZJDhI9o50JAjOEtp7H6Ou6ziFHhHJ4P+h5QryzSp70sCtctIxjW Umc7ecoedpN1aA/aRJVkjkPCePEKuo6RHlRKIEZOf2xu7TniZPo1DjyP5ZgwD0Ul oGY2d+ZijIoZGlE+sn+5criuNgQwx8tszYDrEbZtS0EW8iwTPX2PLnOe1ys9ri1C nxRLla39E6ajk/HppydTFwdpPrF9jOBocSb/qqaOqc74OOEuzMraHE4yDqmaBSqR JfA7iiqu+yLkQlnzNFl+rrQS1q8D+oCiSEGxqWUdka+GRw2nXbxCti0Z2gyETf+x u+Wq0r/oqLRxBjYSTPOFTf0NphqTJ3jTEi00WOC/pEKlG/uLNZQn9I4SNi8bxNiu 8gX+ad/IncQS6OENgk+EoxrHFKZFg9kK8gnCbZr0B6WpfCpp3Sb23GRZEShBe/te u8nfkTFotZjAXhwIy3MFGug8Jml7to4qNwLHVgkYC+wQ66xAV99IGRXN/GheKMf0 P+SFxaCkg+3KMwbqxu8cc+06FQS/6sjtsMCbWGloOcV/svan0EMaPEdP/TsPJYl0 RIyzZyHW584XSrhkVpJ+mpclPnJCzFoh49Zf/2AwzJjm1Sdam4U= =1klB -----END PGP SIGNATURE-----