Bug#1106750: systemd-boot: consider dropping Recommends shim-signed

Martin-Éric Racine martin-eric.racine at iki.fi
Thu May 29 09:49:07 BST 2025


Package: systemd-boot
Version: 257.5-2
Severity: normal
X-Debbugs-Cc: martin-eric.racine at iki.fi

systemd-boot currently Recommends shim-signed, which Depends on grub-efi-amd64-bin, essentially forcing systemd-boot into a chainloader for GRUB-EFI.

Two possibilities come to mind to solve this:

1) systemd-boot stops recommending shim-signed. Probably not desirable for hosts that wants signed binaries.
2) shim-signed stops depending on grub-efi-amd64-bin, instead Depends on grub-efi-amd64-bin|systemd-boot.

Either way works for me, just as long as GRUB doesn't get pulled in via dependencies on a host meant to boot with a minimal systemd-boot.

Martin-Éric

-- System Information:
Debian Release: 13.0
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.27-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8), LANGUAGE=fi:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages systemd-boot depends on:
ii  libc6               2.41-8
ii  libsystemd-shared   257.5-2
ii  systemd             257.5-2
ii  systemd-boot-efi    257.5-2
ii  systemd-boot-tools  257.5-2

Versions of packages systemd-boot recommends:
ii  efibootmgr   18-2
ic  shim-signed  1.44+15.8-1

Versions of packages systemd-boot suggests:
pn  systemd-ukify  <none>

-- no debconf information


More information about the Pkg-systemd-maintainers mailing list