Bug#1107159: systemd-boot-efi-amd64-signed: Signed version of systemd-boot does not include efi stub binaries

Cornelius Hoffmann <[email protected]> Mon, 02 Jun 2025 15:18:38 +0200
Newsgroups gmane.linux.debian.ports.amd64
Message-ID <174887031889.122056.4521349035850637890.reportbug__12397.2482209624$1748871921$gmane$org@periculum.physik.fu-berlin.de>
Package: systemd-boot-efi-amd64-signed
Severity: important
X-Debbugs-Cc: [email protected]
User: [email protected]
Usertags: amd64

Hi,

While trying to install a new trixie system, I noticed that the systemd-stub binary /usr/lib/systemd/boot/efi/linuxx64.efi.stub was missing and thus I could not build a UKI. I noticed this was because systemd-boot depends on systemd-boot-efi-signed of systemd-boot-efi, the former of which is provided by systemd-boot-efi-amd64-signed, which simply does not ship this file, but only systemd-bootx64.efi.signed. As far as I can tell, the packages don't conflict one another, so it might make sense to just add systemd-boot-efi as a hard dependency and the signed version as a Recommends?

Then you would definitely have the stub installed and could install the signed version if you want to. Right now, the stub and unsigned versions are not automatically pulled in.

Best,
Cornelius


-- System Information:
Debian Release: 13.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.27-amd64 (SMP w/24 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)