-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz 50f8762bb5b065de837ba04a6c5df671fb51e112f89005b6f3e847dc84369bb2 debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz 16b135a5c6db31900dd4e61c9b42bf55d7298850cb45b7954483cfeaefece8d28dd99d76a3e8d96eec8c1b5cb9a95ff337c9233f5eb2d82101b96bbfbdc1b831 debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz.hash debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz.hash debian-13-turnkey-yiiframework_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgKSgACgkQ2fx1wp0K AzuRNxAAgbjAnYh4aD77L6dt0/+HikcnW2427H2nV0eaa86C6+HSbYOwff6V/Lhw q/k5tODwZfvcFQOrOGfyTcXWOQC4jzDcKteR0dscmKJslD0ZoSvcC69HANjcDkGr dxC2urVsKYNDw/PVvhGHK6XvURS4gpHkuijPQK/T9dHR1aC6dP5nGLrSd5kwOTMe 71Q/FnGeS34XQS1Fv7BI9I8JC3C3H+02wSbwHmSuUZcmRtjZTsNhLoxGQcvZfQVh pfxckQI1wyoqMF4L634gfRERyQna3MHRAEQVX1QXo45XbEcINvgOD54l4hXkxjk1 GIYuV9sjM1rxgwKKD7JskDqCPVugd2f3LE1KJiGv8HkZvcAlIEPJKzH2S72kDd9M peXqvrM8v41WuOS3526WNE6803+Aatuv00vdVMNTYcwKYG8cGpdPA8J9nHFMUm/P yj9SWXnrCGVKgHmxZiePkqU1EZmD2h9SfEpA7ORDw2bySW87Oxod7+cuCgR9K2TB eRrspnTTdgYzEjwnH9AWBDISwTGyViX13cCqY6Zl7rEqJUNtvTeAmW1n/IoAqNf9 CAzxPqSDmpyWaVkcmiNgRqKsofCEdWtMIz/NMvZ/IYEAcfAsyHzQv/qHJNfafksU Ai9rfsI77dAxlk+c7AOH+HggmepofsILtGQO9D8kgGXYLXovBx8= =f4Q6 -----END PGP SIGNATURE-----