diff --git a/fedora-mbp.ks b/fedora-mbp.ks
index 5e92e2a..323d3c0 100644
--- a/fedora-mbp.ks
+++ b/fedora-mbp.ks
@@ -16,6 +16,8 @@ gcc-c++
 make
 iwd
 wpa_supplicant
+-shim-ia32-15.4-*.x86_64
+-shim-x64-15.4-*.x86_64
 -grub2-efi-ia32-2.06*.fc34.x86_64
 -grub2-efi-ia32-cdboot-2.06*.fc34.x86_64
 -grub2-efi-x64-2.06*.fc34.x86_64
@@ -86,7 +88,7 @@ dnf remove -y kernel-headers
 rm -rf /opt/drivers
 rm -rf /etc/resolv.conf
 
-sed -i '/^type=rpm.*/a exclude=kernel,kernel-core,kernel-devel,kernel-modules,kernel-modules-extra,kernel-modules-internal,grub2-*' /etc/yum.repos.d/fedora*.repo
+sed -i '/^type=rpm.*/a exclude=kernel,kernel-core,kernel-devel,kernel-modules,kernel-modules-extra,kernel-modules-internal,grub2-*,shim-*' /etc/yum.repos.d/fedora*.repo
 # echo -e '[mbp-fedora-kernel]\nname=mbp-fedora-kernel\nbaseurl=http://fedora-mbp-repo.herokuapp.com/\nenabled=1\ngpgcheck=0' > /etc/yum.repos.d/mbp-fedora-kernel.repo
 
 %end