replace version-based patch application by brute force
use more reliable way to hold all installed kernel images