diff --git a/share/runtime-install.tmpl b/share/runtime-install.tmpl
index d0a3020d..0eaa25b5 100644
--- a/share/runtime-install.tmpl
+++ b/share/runtime-install.tmpl
@@ -25,7 +25,7 @@ installpkg grubby
 
 ## arch-specific packages (bootloaders etc.)
 %if basearch == "aarch64":
-    installpkg efibootmgr grub2-efi grubby
+    installpkg efibootmgr grub2-efi grubby shim shim-unsigned
 %endif
 %if basearch in ("arm", "armhfp"):
     installpkg kernel-lpae