Package: sbsigntool Version: 0.6-2 Severity: normal UEFI is implemented on 64-bit and (apparently) 32-bit ARM, and pesign is built for arm{64,el,hf}. sbsigntool:amd64 appears to be able to sign an arm64 kernel image that has an EFI stub, so I think it could be built for those architectures as well. But as it works cross-architecture you might as well enable building on all architectures.
Ben. -- System Information: Debian Release: stretch/sid Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages sbsigntool depends on: ii libc6 2.22-4 ii libssl1.0.2 1.0.2g-1 ii libuuid1 2.27.1-6 sbsigntool recommends no packages. sbsigntool suggests no packages. -- debconf-show failed