so sudo apt-mark hold
seems to only hold the last packages.
sudo apt-mark hold shim
sudo apt-mark hold shim-signed
sudo apt-mark showhold
showhold shows just
shim-signed
if I do
sudo apt-mark hold shim-signed
sudo apt-mark hold shim
sudo apt-mark showhold
showhold shows just
shim
I thought maybe it was dependency combining as shim and shim-signed are related. so I tested it with a unrelated package.
sudo apt-mark hold shim-signed
sudo apt-mark hold ufoai
sudo apt-mark showhold
showhold shows just
ufoai
the last package is only one that shows up.
I tried putting the command together.
sudo apt-mark hold shim shim-signed ufoai
it shows
ufoai was already set on hold
shim set on hold
shim-signed set on hold
then
sudo apt-mark showhold
showhold now shows something unexpected.
shim
shim-signed
ok this is what I wanted. so I
sudo apt-mark unhold ufoai
and it says
ufoai was already not hold.
I want to really make sure the Microsoft boot loader shim and shim-signed are not going to accidentally get on to my system. because I have a feeling it will be really hard for me to get it off my system. seems like a only with MS approval can this program can be run, type thing. at least that's what I get from this https://github.com/rhboot/shim. so my question is their some where I can check these packages are really on hold? is apt-mark hold the correct/best way to be doing this, what is if not? I am new-ish to linux so assume no basic knowledge.
lsb_release -a
shows
Description: Ubuntu 20.04.02 LTS
also
apt --version
shows
apt 2.0.5 (amd64)