diff -Nru shim-signed-1.34.9/debian/changelog shim-signed-1.34.10~test1/debian/changelog --- shim-signed-1.34.9/debian/changelog 2018-04-24 17:24:24.000000000 +0000 +++ shim-signed-1.34.10~test1/debian/changelog 2018-05-08 11:54:32.000000000 +0000 @@ -1,3 +1,9 @@ +shim-signed (1.34.10~test1) bionic; urgency=medium + + * Test for usage of --auto-nvram. + + -- Ɓukasz 'sil2100' Zemczak Tue, 08 May 2018 13:54:32 +0200 + shim-signed (1.34.9) bionic; urgency=medium * debian/shim-signed.postinst: check for MOK existence rather than ignoring diff -Nru shim-signed-1.34.9/debian/control shim-signed-1.34.10~test1/debian/control --- shim-signed-1.34.9/debian/control 2018-04-24 16:21:30.000000000 +0000 +++ shim-signed-1.34.10~test1/debian/control 2018-05-08 11:54:29.000000000 +0000 @@ -9,7 +9,7 @@ Package: shim-signed Architecture: amd64 -Depends: ${misc:Depends}, shim (= ${shim:Version}), grub-efi-amd64-bin, grub2-common (>= 2.02~beta2-36ubuntu12), mokutil, sbsigntool +Depends: ${misc:Depends}, shim (= ${shim:Version}), grub-efi-amd64-bin, grub2-common (>= 2.02-2ubuntu9~test4), mokutil, sbsigntool Recommends: secureboot-db Built-Using: shim (= ${shim:Version}) Description: Secure Boot chain-loading bootloader (Microsoft-signed binary) diff -Nru shim-signed-1.34.9/debian/shim-signed.postinst shim-signed-1.34.10~test1/debian/shim-signed.postinst --- shim-signed-1.34.9/debian/shim-signed.postinst 2018-04-24 17:20:34.000000000 +0000 +++ shim-signed-1.34.10~test1/debian/shim-signed.postinst 2018-05-08 11:52:24.000000000 +0000 @@ -61,7 +61,7 @@ if [ "$bootloader_id" ] && [ -d "/boot/efi/EFI/$bootloader_id" ] \ && which grub-install >/dev/null 2>&1 then - grub-install --target=x86_64-efi + grub-install --auto-nvram --target=x86_64-efi if dpkg --compare-versions "$2" lt-nl "1.22~"; then rm -f /boot/efi/EFI/ubuntu/MokManager.efi fi