Shim verifies the signature of grubx64.efi if secureboot is enabled so it won't boot ours. Hence, we need to copy ubuntu signed .efi.