And this was a debug session from hell, enormously helped by an AI doing much of the grunt-work.

notifier_call_chain

Future kernel updates would require the updated kernels to be signed again, so it makes sense to put the signing commands in a script that can be run at a later date as necessary. A sample script /root/module-signing/sign-vbox-modules is given below.

Reinstalling a kernel from a chroot

select proprietary or out-of-tree modules (ex. vitualbox, nvidia, fglrx, bcmwl, etc.)