The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.