(In reply to Marcus Schaefer from comment #5) > Even if you fix shim-install to not call grub2-install on > efi it will still do that for older versions and I doubt there will be > anybody touching it there. if shim-install is considered a detail of grub2-install we could move shim-install to %_libexecdir as it's no longer meant to be called outside. Therefore kiwi wouldn't find it anymore so wouldn't have to activate the code path for the hack on old systems.