Every artifact below is hashed and signed at release time -- verify before you boot it. See the verification box further down.
dd on Linux/macOS. lingos-x86_64.iso can also just
be attached directly as a virtual optical drive in QEMU or VirtualBox -- no writing needed.
MD5 is published for quick corrupted-download checks only -- it is not a security check, MD5 is cryptographically broken. SHA3-256 is the real integrity check. The ML-DSA-65 signature (FIPS 204, post-quantum) is the real authenticity check: it proves the file was signed by the LingOS release key, not just that it's uncorrupted.
# SHA3-256 (integrity) sha3sum lingos-x86_64.iso # compare against lingos-x86_64.iso.sha3-256 # ML-DSA-65 signature (authenticity, post-quantum, FIPS 204) # verify lingos-x86_64.iso.sig against lingos-x86_64.iso using # signing-key.ml-dsa-65.pub and any FIPS-204-compliant verifier # Full manifest, all artifacts: curl -O https://os.ling-lang.org/static/downloads/CHECKSUMS.txt