Bug#1014902: installation-reports: grub-efi-amd64-signed not installed with base-installer/install-recommends set to false
Package: installation-reports
Severity: normal
Boot method: CD
Image version: debian-11.3.0-amd64-netinst.iso
Date: 2022-07-08
Machine: qemu (via libvirt)
I installed Debian with the following preseed option:
d-i base-installer/install-recommends boolean false
The VM uses UEFI and has secure boot enabled (the default).
The installation correctly installed the "shim" loader, but it looks
like "grub-efi-amd64-signed" is only pulled in via a Recommends from
"grub-efi-amd64-bin". This results in only the unsigned version of
grub getting installed (and shim not installed to /boot/efi) and a
non-booting system.
I think the logic selecting "shim" to be installed should also pull in
the signed version of grub explicitly to have at least a bootable
system even with install-recommends set to false.
Ansgar
Reply to: