-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/18.x/keys/tkl-bookworm-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-bookworm-images@turnkeylinux.org
      pub   rsa4096 2023-05-22 [SC] [expires: 2043-05-17]
            2614 7592 087C 0EDE 4214  3B63 7761 DEBA BBCF BA7C
      uid           [ unknown] TurnKey GNU/Linux Bookworm Images (GPG signing key for TurnKey Linux Bookworm Images) <release-bookworm-images@turnkeylinux.org>
      sub   rsa4096 2023-05-22 [S] [expires: 2043-05-17]
      
    $ gpg --verify turnkey-domain-controller-18.0-bookworm-amd64.iso.hash
      gpg: Signature made using RSA key ID 26147592087C0EDE42143B637761DEBABBCFBA7C
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-domain-controller-18.0-bookworm-amd64.iso
      bcc89c0f63df0339a93e63d6dcb7f323599bd650fc54ee7436d1215cfb80d76d  turnkey-domain-controller-18.0-bookworm-amd64.iso

    $ sha512sum turnkey-domain-controller-18.0-bookworm-amd64.iso
      0c867a3f5b770a28cbe6181c07eb312e73887da51a2552286328e0115710e4e19e9b0a4a4759183de14253614a2c037bf52e4254ac22dc84c2059b2e759040a1  turnkey-domain-controller-18.0-bookworm-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-domain-controller-18.0-bookworm-amd64.iso.hash
      turnkey-domain-controller-18.0-bookworm-amd64.iso: OK

    $ sha512sum -c turnkey-domain-controller-18.0-bookworm-amd64.iso.hash
      turnkey-domain-controller-18.0-bookworm-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=uBpX
-----END PGP SIGNATURE-----