I'm using the HP SDR system (MCP specifically) for Linux packages to manage the HP hardware RAID, iLo, etc. The kernel drivers for the hardware are upstream, so these are just management utilities.
deb http://downloads.linux.hp.com/SDR/downloads/mcp/ precise current/non-free
Per the FAQ, you can add an apt key so the repo isn't from an unsigned source.
wget http://downloads.linux.hp.com/SDR/downloads/mcp/GPG-KEY-mcp -O - | sudo apt-key add - apt-key list /etc/apt/trusted.gpg -------------------- pub 1024D/437D05B5 2004-09-12 uid Ubuntu Archive Automatic Signing Key <firstname.lastname@example.org> sub 2048g/79164387 2004-09-12 pub 1024D/FBB75451 2004-12-30 uid Ubuntu CD Image Automatic Signing Key <email@example.com> pub 4096R/C0B21F32 2012-05-11 uid Ubuntu Archive Automatic Signing Key (2012) <firstname.lastname@example.org> pub 4096R/EFE21092 2012-05-11 uid Ubuntu CD Image Automatic Signing Key (2012) <email@example.com> pub 1024D/2689B887 2005-03-11 [expires: 2015-03-09] uid Hewlett-Packard Company (HP Codesigning Service) sub 2048g/57E5E96D 2005-03-11 [expires: 2015-03-09] sudo apt-get install hponcfg Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: hponcfg 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/44.0 kB of archives. After this operation, 164 kB of additional disk space will be used. WARNING: The following packages cannot be authenticated! hponcfg Install these packages without verification [y/N]?
Of course, I can override with -y, but I don't understand why it is saying that the packages can't be authenticated when I've added the proper repo GPG key to my keychain.
Can anyone explain this or how to fix it without telling apt to do something unwise every time?
I noticed that there is no /var/lib/apt/lists/ Release or Release.gpg entry on my system, but they exist in the repo. Perhaps this is the source of the problem?