Comment 11 for bug 1920008

Similar on groovy

# dpkg-query -W | grep grub
grub-common 2.04-1ubuntu35.4
grub-efi-amd64 2.04-1ubuntu35.4
grub-efi-amd64-bin 2.04-1ubuntu35.4
grub-efi-amd64-signed 1.155.4+2.04-1ubuntu35.4
grub2-common 2.04-1ubuntu35.4

# apt install grub-efi-amd64-signed
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  grub-efi-amd64 grub-efi-amd64-bin
Recommended packages:
  efibootmgr secureboot-db
The following packages will be upgraded:
  grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed
3 upgraded, 0 newly installed, 0 to remove and 144 not upgraded.
Need to get 1256 kB of archives.
After this operation, 356 kB of additional disk space will be used.
Do you want to continue?

grub-mkimage -O x86_64-efi -o foo -p /boot/grub --verbose; works

and if i choose to upgrade grub-common too, it also still works.