Package: installation-reports Severity: normal Boot method: CD Image version: debian-11.3.0-amd64-netinst.iso Date: 2022-07-08
Machine: qemu (via libvirt) I installed Debian with the following preseed option: d-i base-installer/install-recommends boolean false The VM uses UEFI and has secure boot enabled (the default). The installation correctly installed the "shim" loader, but it looks like "grub-efi-amd64-signed" is only pulled in via a Recommends from "grub-efi-amd64-bin". This results in only the unsigned version of grub getting installed (and shim not installed to /boot/efi) and a non-booting system. I think the logic selecting "shim" to be installed should also pull in the signed version of grub explicitly to have at least a bootable system even with install-recommends set to false. Ansgar
