Dear Maintainer,

The efibootguard package for amd64 ships the following binaries:
 - /usr/bin/bg_gen_unified_kernel
 - /usr/bin/bg_printenv
 - /usr/bin/bg_setenv
 - /usr/lib/x86_64-linux-gnu/efibootguard/efibootguardx64.efi
 - /usr/lib/x86_64-linux-gnu/efibootguard/kernel-stubx64.efi

I think it makes sense to ship the efi binaries in the efibootguard package
and to ship the host tools in a package named e.g. efibootguard-tools.

It could even make sense to split bg_gen_unified_kernel into its own
packages as it's not really a tool for the target?

This bug really is wishlist level; I opened the bug to start a discussion
about it.

This is a valid suggestion. We should split off the runtime tools
already to avoid sneaking in an unneeded python dependency into small
systems, something at bg_gen_unified_kernel brings.

I'm not sure if there is a value in separating the script from efi
binaries, though. You normally need them together when installing EBG
and UKIs.

Hello,

I'm also in favor of separating the tools from the EFI binaries.

Due to the tools, the efibootguard package currently has a dependency on python3,
which we are currently patching out since we don't need the tools in our images anyway.

Installing Python would significantly increase our internal efforts for example related to vulnerability management and OSS license clearing.

For us, this bug is more than wish list level as we want to get rid of our internal patch as soon as possible.

Thank you.

We believe that the bug you reported is fixed in the latest version of
efibootguard, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1051324@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Quirin Gylstorff <quirin.gylstorff@siemens.com> (supplier of updated efibootguard package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 12 Jun 2025 14:55:39 +0200
Source: efibootguard
Binary: efibootguard efibootguard-tools efibootguard-tools-dbgsym libebgenv-dev libebgenv0 libebgenv0-dbgsym
Architecture: source amd64
Version: 0.20-1
Distribution: unstable
Urgency: medium
Maintainer: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Changed-By: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Description:
 efibootguard - UEFI-based bootloader
 efibootguard-tools - Tools to get and set information from efibootguard
 libebgenv-dev - efibootguard development files
 libebgenv0 - efibootguard library files
Closes: 1051324 1104539
Changes:
 efibootguard (0.20-1) unstable; urgency=medium
 .
   * Update to efibootguard 0.20
   * Enable unit tests post-trixie (Closes: #1104539)
   * Split bg_setenv and bg_printenv in a separate package (Closes: #1051324)
Checksums-Sha1:
 66ccc007b57f63eb90ab22280fa618da3d4943d3 2029 efibootguard_0.20-1.dsc
 8b9352e9977fc84e37b1c2d1ed3a45238c0430fc 84640 efibootguard_0.20.orig.tar.xz
 94dea60e229549ac9fdce7ac0c86628fbb616770 8816 efibootguard_0.20-1.debian.tar.xz
 b23d2cd7210eaf03dbc28df4fc6bf1892741ce20 63488 efibootguard-tools-dbgsym_0.20-1_amd64.deb
 6b5c27ef26046ff19addfc87bacccdef1b09174e 28244 efibootguard-tools_0.20-1_amd64.deb
 8945e90debbb69e900d0269092b32d3659ed8e71 7853 efibootguard_0.20-1_amd64.buildinfo
 851d84b1d934662086c49f30fd7a550db1c74177 50072 efibootguard_0.20-1_amd64.deb
 d4d7384b6e641330276f91c099f3236f8330dd89 20996 libebgenv-dev_0.20-1_amd64.deb
 fe0177a4cd97b8772180cd36e050bf52529de87a 45256 libebgenv0-dbgsym_0.20-1_amd64.deb
 ea89a18d4e7496becc5a6c7dd8759599fdd6296f 18448 libebgenv0_0.20-1_amd64.deb
Checksums-Sha256:
 f9888abfcf3b4e5a83adaf8d3dfa47e05e91cf38fe1eaef70389debf2ff1965e 2029 efibootguard_0.20-1.dsc
 38af5269f95293649c48daf435088ddaae8bdc872c83c37b140d7d6aa62dab6b 84640 efibootguard_0.20.orig.tar.xz
 ff5f3a525cd970bf7cbabae2d620f05b5767d2f22fb42cf362a0e56814cf7312 8816 efibootguard_0.20-1.debian.tar.xz
 1737d73acc039e38a29d5ec33ba4a9c18364bb18d0d814ea3e0787ed865538c3 63488 efibootguard-tools-dbgsym_0.20-1_amd64.deb
 4bf2839d816e75aedbc1a513901bd22a07b7bcc4d487eb2bc707dc1a5a4071ec 28244 efibootguard-tools_0.20-1_amd64.deb
 c3eb10112812e082243ffd2a243db4e0181edfdffa843504f46a18a47c3acbb0 7853 efibootguard_0.20-1_amd64.buildinfo
 82b6d07102573da8aad9da89a9a3cd2b89b35544e1fc4396f29c8cf7db224ea8 50072 efibootguard_0.20-1_amd64.deb
 019cf6fdb09dcbc844b911a8f10934c787d2c3f1dcedbabdf3229294e2011158 20996 libebgenv-dev_0.20-1_amd64.deb
 dfaf0a88f1963442c7d73fd968d01d100ce156cee9aa7fd35ad4d8b7c353b253 45256 libebgenv0-dbgsym_0.20-1_amd64.deb
 653bbcbad306f97081196835f138dd5e4d224759412de2a50857a430f22f8c2d 18448 libebgenv0_0.20-1_amd64.deb
Files:
 78796e8d6f37882d2dda3f9db5b90633 2029 admin optional efibootguard_0.20-1.dsc
 0b40c8c7e787c4d15746df8637650b66 84640 admin optional efibootguard_0.20.orig.tar.xz
 addc43e445d23371e7c58d8c08e161d1 8816 admin optional efibootguard_0.20-1.debian.tar.xz
 1b6b295694d39028c0a8f501367f4413 63488 debug optional efibootguard-tools-dbgsym_0.20-1_amd64.deb
 53e18ea806f2da9fa8ade231cc403f2a 28244 admin optional efibootguard-tools_0.20-1_amd64.deb
 166c3d88d77f3901bd627dad95108511 7853 admin optional efibootguard_0.20-1_amd64.buildinfo
 2caa74a83e31a95771c42d31b0e7d66b 50072 admin optional efibootguard_0.20-1_amd64.deb
 c11b5ab8ecd2260bba562acb4b4e6df3 20996 libdevel optional libebgenv-dev_0.20-1_amd64.deb
 78f468d16664fcbabde6994fa488cc30 45256 debug optional libebgenv0-dbgsym_0.20-1_amd64.deb
 0f62c2f49d7aad118be52652fd8f27ae 18448 libs optional libebgenv0_0.20-1_amd64.deb
-----BEGIN PGP SIGNATURE-----

iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmidnAUQHGJhZ2VAZGVi
aWFuLm9yZwAKCRAfXHqLRVZDFNeiDACWkYd1hHAxB4JruS0s9abb1jY0n40MlkF7
NoQyu3N/9Lb+veOmipp6dPv4jjtDLFLyD47R/K3V7blJwKrxPaezbVk8bAWiY4P9
TtITz8m/nS9uAV4esGXKhBSDDCX1aYPIyUdo9zQscpToE5BbHHVWsbHgwOUTY03U
vngbdBEU01r2O2/tpKHgV7qBRQIo1LBD6G8EIbg/sBZAHbRnQd+c0PHhuA5hPomU
1zwv//6h5QStHZWJz6oeDo59ZlaTMd31EdT1AHbL7YZ7w2h04fkaMLKODf+N5aUl
yUoCfpRmd8VrHjbV1yWdAN9z6kq6UEkAl9odNGW+suawcy9WI7WCH0Mu8dtXqJ/x
oYcolQI0KKa6AA+m4NiwIg5m6LIGevphYLP5XPVhsc/wfFux4sMlMUS/J0tJ10vG
EA22khxppNBeN3q1Ea8A9LjUQEqc1xoAtkYj7SwYrEpsckySb3SVR3YdnGJxsMmh
nk5xKtnKOsg53puz75mN1GpvQh7eLzw=
=pMrj
-----END PGP SIGNATURE-----