In case it's relevant, the other options to force non-interactive install were in /etc/apt/apt.conf APT::Get::Show-Upgraded "true"; DPkg::Options {"--force-confmiss";"--force-confold"};
We appear to have worked around it by adding
shim-signed shim/disable_secureboot boolean false shim-signed shim/enable_secureboot boolean true
in the preseed file.
In case it's relevant, the other options to force non-interactive install were in /etc/apt/apt.conf :Show-Upgraded "true"; confmiss" ;"--force- confold" };
APT::Get:
DPkg::Options {"--force-
We appear to have worked around it by adding
shim-signed shim/disable_ secureboot boolean false secureboot boolean true
shim-signed shim/enable_
in the preseed file.