Bug#932358: shim-signed recommends secureboot-db package but this package is not available
Source: shim-signed
Severity: normal
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
When installing shim-signed package on a buster fresh install, apt recommends to install secureboot-db package but this one is not available in repository.
* What exactly did you do (or not do) that was effective (or
ineffective)?
apt-cache show shim-signed
apt-get install secureboot-db
* What was the outcome of this action?
# apt-cache show shim-signed
Package: shim-signed
Source: shim-signed (1.33)
Version: 1.33+15+1533136590.3beb971-7
Installed-Size: 1301
Maintainer: Debian EFI Team <debian-efi@lists.debian.org>
Architecture: amd64
Depends: shim-signed-common (= 1.33+15+1533136590.3beb971-7), grub-efi-amd64-bin, shim-helpers-amd64-signed (>= 1+15+1533136590.3beb971+7), grub2-common (>= 2.02+dfsg1-16)
Recommends: secureboot-db
Description-en: Secure Boot chain-loading bootloader (Microsoft-signed binary)
This package provides a minimalist boot loader which allows verifying
signatures of other UEFI binaries against either the Secure Boot DB/DBX or
against a built-in signature database. Its purpose is to allow a small,
infrequently-changing binary to be signed by the UEFI CA, while allowing
an OS distributor to revision their main bootloader independently of the CA.
.
This package contains the version of the bootloader binary signed by the
Microsoft UEFI CA.
Description-md5: a481805ba65b750cfdd6438a7d8539a2
Multi-Arch: same
Built-Using: shim (= 15+1533136590.3beb971-7)
Section: utils
Priority: optional
Filename: pool/main/s/shim-signed/shim-signed_1.33+15+1533136590.3beb971-7_amd64.deb
Size: 334596
MD5sum: 13b95fb039c4c0419f8c263a312065da
SHA256: da466858eee1786433646dfcc9918395d2da06a7fb1815a3f66de749f5d8e506
# apt-get install secureboot-db
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package secureboot-db is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
E: Package 'secureboot-db' has no installation candidate
* What outcome did you expect instead?
Installing the secureboot-db package
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 10.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-5-amd64 (SMP w/1 CPU core)
Kernel taint flags: TAINT_CRAP
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Reply to: