How To Install shim-signed on Ubuntu 20.04
Introduction
In this tutorial we learn how to install shim-signed
on Ubuntu 20.04.
What is shim-signed
shim-signed is:
This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.
This package contains the version of the bootloader binary signed by the Microsoft UEFI CA. Task: ubuntu-core Important: yes Phased-Update-Percentage: 37
Package: shim-signed Status: install ok installed Priority: optional Section: utils Installed-Size: 1364 Maintainer: Steve Langasek [email protected] Architecture: amd64 Source: shim-signed (1.40.4) Version: 1.40.4+15+1552672080.a4a1fbe-0ubuntu2 Depends: debconf (>= 0.5) | debconf-2.0, shim (= 15+1552672080.a4a1fbe-0ubuntu2), grub-efi-amd64-signed | grub-efi-arm64-signed, grub2-common (>= 2.04-1ubuntu24), mokutil (>= 0.3.0+1538710437.fb6250f-0ubuntu2), sbsigntool Recommends: secureboot-db Description-en: Secure Boot chain-loading bootloader (Microsoft-signed binary) This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.
This package contains the version of the bootloader binary signed by the Microsoft UEFI CA. Built-Using: shim (= 15+1552672080.a4a1fbe-0ubuntu2)
Package: shim-signed Architecture: amd64 Version: 1.40.3+15+1533136590.3beb971-0ubuntu1 Built-Using: shim (= 15+1533136590.3beb971-0ubuntu1) Priority: optional Section: utils Source: shim-signed (1.40.3) Origin: Ubuntu Maintainer: Steve Langasek [email protected] Bugs: https://bugs.launchpad.net/ubuntu/+filebug Installed-Size: 1357 Depends: debconf (>= 0.5) | debconf-2.0, shim (= 15+1533136590.3beb971-0ubuntu1), grub-efi-amd64-signed | grub-efi-arm64-signed, grub2-common (>= 2.04-1ubuntu24), mokutil (>= 0.3.0+1538710437.fb6250f-0ubuntu2), sbsigntool Recommends: secureboot-db Filename: pool/main/s/shim-signed/shim-signed_1.40.3+15+1533136590.3beb971-0ubuntu1_amd64.deb Size: 343812 MD5sum: 60399bb8b0551dfb727e890a05da7f37 SHA1: dd468bf102ba0916c665c043fda0b99d5812a039 SHA256: ec17a7a92e7fa5fc2c2ef4b6c2024d7ea98e2e64307d4e7ea29688b5974f7686 Description-en: Secure Boot chain-loading bootloader (Microsoft-signed binary) This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.
This package contains the version of the bootloader binary signed by the Microsoft UEFI CA. Task: ubuntu-core
There are three methods to install shim-signed
on Ubuntu 20.04. We can use apt-get
, apt
and aptitude
. In the following sections we will describe each method. You can choose one of them.
Install shim-signed Using apt-get
Update apt database with apt-get
using the following command.
sudo apt-get update
After updating apt database, We can install shim-signed
using apt-get
by running the following command:
sudo apt-get -y install shim-signed
Install shim-signed Using apt
Update apt database with apt
using the following command.
sudo apt update
After updating apt database, We can install shim-signed
using apt
by running the following command:
sudo apt -y install shim-signed
Install shim-signed Using aptitude
If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Ubuntu. Update apt database with aptitude
using the following command.
sudo aptitude update
After updating apt database, We can install shim-signed
using aptitude
by running the following command:
sudo aptitude -y install shim-signed
How To Uninstall shim-signed on Ubuntu 20.04
To uninstall only the shim-signed
package we can use the following command:
sudo apt-get remove shim-signed
Uninstall shim-signed And Its Dependencies
To uninstall shim-signed
and its dependencies that are no longer needed by Ubuntu 20.04, we can use the command below:
sudo apt-get -y autoremove shim-signed
Remove shim-signed Configurations and Data
To remove shim-signed
configuration and data from Ubuntu 20.04 we can use the following command:
sudo apt-get -y purge shim-signed
Remove shim-signed configuration, data, and all of its dependencies
We can use the following command to remove shim-signed
configurations, data and all of its dependencies, we can use the following command:
sudo apt-get -y autoremove --purge shim-signed
References
Summary
In this tutorial we learn how to install shim-signed
package on Ubuntu 20.04 using different package management tools: apt
, apt-get
and aptitude
.