replace version-based patch application by brute force
use more reliable way to hold all installed kernel images
makefile: further patch application verboseness