How To Install shim-unsigned on Debian 12

Learn how to install shim-unsigned on Debian 12 with this tutorial. shim-unsigned is boot loader to chain-load signed boot loaders under Secure Boot

Introduction

In this tutorial we learn how to install shim-unsigned on Debian 12.

What is shim-unsigned

shim-unsigned is:

This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.

There are three methods to install shim-unsigned on Debian 12. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install shim-unsigned Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install shim-unsigned using apt-get by running the following command:

sudo apt-get -y install shim-unsigned

Install shim-unsigned Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install shim-unsigned using apt by running the following command:

sudo apt -y install shim-unsigned

Install shim-unsigned Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install shim-unsigned using aptitude by running the following command:

sudo aptitude -y install shim-unsigned

How To Uninstall shim-unsigned on Debian 12

To uninstall only the shim-unsigned package we can use the following command:

sudo apt-get remove shim-unsigned

Uninstall shim-unsigned And Its Dependencies

To uninstall shim-unsigned and its dependencies that are no longer needed by Debian 12, we can use the command below:

sudo apt-get -y autoremove shim-unsigned

Remove shim-unsigned Configurations and Data

To remove shim-unsigned configuration and data from Debian 12 we can use the following command:

sudo apt-get -y purge shim-unsigned

Remove shim-unsigned configuration, data, and all of its dependencies

We can use the following command to remove shim-unsigned configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge shim-unsigned

Dependencies

shim-unsigned have the following dependencies:

References

Summary

In this tutorial we learn how to install shim-unsigned package on Debian 12 using different package management tools: apt, apt-get and aptitude.