postinst is in linux-signed-image-4.15.0-15-generic 4.15.0-15.16~16.04.1.
This file is a maintainer script. It is executed when installing (*inst) or removing (*rm) the package.
The actual contents of the file can be viewed below.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 | #!/bin/sh -e
kernel='vmlinuz-4.15.0-15-generic'
case "$0-$1" in
*.postinst-configure)
	rm -f /boot/$kernel.efi.signed
	cp /boot/$kernel /boot/$kernel.efi.signed
	sbattach --attach /usr/lib/linux/$kernel.efi.signature /boot/$kernel.efi.signed
	
	if which update-grub >/dev/null 2>&1; then
		update-grub || true
	fi
	;;
*.postrm-remove)
	rm -f /boot/$kernel.efi.signed
	if which update-grub >/dev/null 2>&1; then
		update-grub || true
	fi
	;;
esac
exit 0
 |