diff --git a/boot/seal.go b/boot/seal.go
index b8f13bc8a99..c9cd880a0a4 100644
--- a/boot/seal.go
+++ b/boot/seal.go
@@ -220,6 +220,7 @@ func sealKeyToModeenvUsingSecboot(key, saveKey keys.EncryptionKey, model *assert
 	if err != nil {
 		return fmt.Errorf("cannot compose recovery boot chains: %v", err)
 	}
+	logger.Debugf("recovery bootchain:\n%+v", recoveryBootChains)
 
 	// build the run mode boot chains
 	bl, err := bootloader.Find(InitramfsUbuntuBootDir, &bootloader.Options{
@@ -236,6 +237,7 @@ func sealKeyToModeenvUsingSecboot(key, saveKey keys.EncryptionKey, model *assert
 	if err != nil {
 		return fmt.Errorf("cannot compose run mode boot chains: %v", err)
 	}
+	logger.Debugf("run mode bootchain:\n%+v", runModeBootChains)
 
 	pbc := toPredictableBootChains(append(runModeBootChains, recoveryBootChains...))