-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-redis-16.2-buster-amd64.ova.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-redis-16.2-buster-amd64.ova 97860565d82b980e428bb0f186c71cfe7863db0fb918fe3cf2186b8989a8c8cf turnkey-redis-16.2-buster-amd64.ova $ sha512sum turnkey-redis-16.2-buster-amd64.ova d005de298aa224b301e5bee753c4754de95b96f5f7090aad1f39094b5dc31ae3db365c2eced2fef381b6805c074b4b8ce7c493e0cdc23fd0ee24c2649cf63608 turnkey-redis-16.2-buster-amd64.ova Note, you can compare hashes automatically:: $ sha256sum -c turnkey-redis-16.2-buster-amd64.ova.hash turnkey-redis-16.2-buster-amd64.ova: OK $ sha512sum -c turnkey-redis-16.2-buster-amd64.ova.hash turnkey-redis-16.2-buster-amd64.ova: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmA7b58ACgkQrF6wBJPl vBxlsA//Th50YEq7pztXzfiTwp/tjvJ/w9H9ct4LpaYVwE36v3alMF1+0Z9Yl4/g yiZf1f22rceF9dr2cueKHeb2oHvr/BE81ty+Y0+i4TAmgqvMuxcwkdQYLKdKeuli dW3sovLHLioIxqSR9ZfLjiqz+A8KGZSrYHZ9eFw1r4VwPxfGc3S79KXtcGnJUeNN EUqQM/nkw4sxezO98KUEVsANA3MacCMiatMjLNFuDs7k6zHUAKZ8cB2wz9JpBJUs RC9/QAUR9LdcmM0xn78hRsFR+HCKtzTF7+24zfarHhbLxczqbbsl8+OVWn62mKvb xWv1eXyUNAUOYJoDqO9aNEjkDFd9HKFQQPoxdwR80dgCyBMdp6gVsO8mIdnnFDL8 eieGXlMPytL7VRFkoNudidw6+CzwY+er3Z71DFT550+i8aJPB+9UI1YqM4oUQeyZ MuLj9IqZ3EMG2JOlOcVAnhxEjN3pVrlBcDdQ+PcH7NXhcqg4I6dmoaZNUQN8Sy0N 3MAzbcwvpB9+RL8CfcFMojk1ax5t07QW6jiyd/hQur+coHEtNPiW4NLGLEHXPncc 9YcdIwPYkdAw5kewIOVOzagKURthTcAtlDq2JS/K70R6d/vkMMKhM76XK9pOHg3g J702Xk8UJlAeg1sqAe+5IRzV8pbGQDfwHwf1fBlyYZdttpnhQug= =I/lc -----END PGP SIGNATURE-----