diff --git a/debian/changelog b/debian/changelog
index 806597d..4b871a2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
 calamares-settings-ubuntu (27) cosmic; urgency=medium
 
-  * Add missing identifiers for urllib exception handling. 
+  * Add missing identifiers for urllib exception handling.
+  * Lubuntu: ensure upgrades don't happen for EFI packages. 
 
  -- Walter Lapchynski <wxl@ubuntu.com>  Mon, 15 Oct 2018 21:01:34 -0700
 
diff --git a/lubuntu/modules/before_bootloader_context.conf b/lubuntu/modules/before_bootloader_context.conf
index 064594a..1c6d60c 100644
--- a/lubuntu/modules/before_bootloader_context.conf
+++ b/lubuntu/modules/before_bootloader_context.conf
@@ -8,13 +8,11 @@ firmwareType:
     "*":
         -    command: apt-cdrom add -m -d=/media/cdrom/
              timeout: 10
+        -    command: sed -i '/deb http/d' /etc/apt/sources.list
+             timeout: 10
         -    command: apt-get update
              timeout: 120
         -    command: apt install -y --no-upgrade -o Acquire::gpgv::Options::=--ignore-time-conflict grub-efi-$(if grep -q 64 /sys/firmware/efi/fw_platform_size; then echo amd64-signed; else echo ia32; fi)
              timeout: 300
         -    command: apt install -y --no-upgrade -o Acquire::gpgv::Options::=--ignore-time-conflict shim-signed
              timeout: 300
-        -    command: sed -i '/deb cdrom/d' /etc/apt/sources.list
-             timeout: 10
-        -    command: apt-get update
-             timeout: 120