Bug#1095743: grub-efi-amd64-signed: grub-efi-amd64 should include the bli module

[Norbert Lange]

Package: grub-efi-amd64-unsigned
Version: 1+2.12+5
Severity: normal
X-Debbugs-Cc: nolange79 at gmail.com

Dear Maintainer,

Setting up a system with "Secure Boot! will prohibit
dynamically loading modules via insmod.

Grub implements the "Boot Loader Interface" with the
bli module. This for ex. allows locating and mounting
boot and esp partitions with systemd-gpt-auto-generator.

For that to work, it needs to be included in the binary,
I havent found a way to do this, I tried:

grub-install --modules=bli ..

Secure-Boot is common with x64, please bundle this module
by default.

-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.12-amd64 (SMP w/32 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages grub-efi-amd64-signed depends on:
ii  grub-common  2.12-5

Versions of packages grub-efi-amd64-signed recommends:
ii  shim-signed  1.44+15.8-1

grub-efi-amd64-signed suggests no packages.

Versions of packages grub-efi-amd64-unsigned depends on:
ii  grub-common  2.12-5

-- no debconf information