#! /bin/sh

modprobe efivarfs
in-target mount -t efivarfs none /sys/firmware/efi/efivars
if ! in-target --pass-stdout mokutil --sb-state | grep -q enabled ; then
    in-target apt remove shim-signed
fi
