Comment 31 for bug 1708245

Steve,

Thanks, but unfortunately the shim-signed package still has another problem.

It deps on a grub2-common version that is not available (see comment #26).

  -Depends: <...> grub2-common (>= 2.02~beta2-9ubuntu1.14), mokutil
  +Depends: <...> grub2-common (>= 2.02~beta2-36ubuntu12), mokutil

So, it fails to install:

    $ sudo apt-get install shim-signed grub2-common
    <...>
    The following packages have unmet dependencies:
     shim-signed : Depends: grub2-common (>= 2.02~beta2-36ubuntu12) but 2.02~beta2-9ubuntu1.15 is to be installed
    <...>

It seems a leftover from Xenial (which ships grub2 version 2.02~beta2-36ubuntu3.18 now) that unfortunately breaks Trusty.

Thus d-i can't yet build on trusty-proposed.