diff --git a/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel.inc b/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel.inc
index 637ac67..333e8fd 100644
--- a/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel.inc
+++ b/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel.inc
@@ -14,28 +14,11 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=d7810fab7487fb0aad327b76f1be7cd7"
 LINUX_VERSION ?= "${PV}"
 LINUX_VERSION_EXTENSION_append = "-citadel"
 
-SRC_URI = "https://cdn.kernel.org/pub/linux/kernel/v4.x/linux-${LINUX_VERSION}.tar.xz;name=kernel"
-
-
-SRC_URI += "https://github.com/minipli/linux-unofficial_grsec/releases/download/v${LINUX_VERSION}-unofficial_grsec/v${LINUX_VERSION}-unofficial_grsec-${PATCH_DATE_TAG}.diff;name=patch"
-
-SRC_URI += " \
-    file://defconfig \
-    file://ignore-sysroot-for-plugin-build.patch \
-    file://0114-smpboot-reuse-timer-calibration.patch \
-    file://0116-Initialize-ata-before-graphics.patch \
-    file://0117-WireGuard.patch \
-    file://0118-More-gcc8-plugin-fixes.patch \
-    file://0119-do-not-alias-select-params.patch \
-    file://0120-Fix-gcc8-wrestrict-error.patch \
-    file://0001-libata-Add-new-med_power_with_dipm-link_power_manage.patch \
-    "
-
 S = "${WORKDIR}/linux-${LINUX_VERSION}"
 
 do_deploy_append() {
     rm ${DEPLOYDIR}/bzImage
-    ln -sf bzImage-initramfs${KERNEL_IMAGE_BASE_NAME}.bin ${DEPLOYDIR}/bzImage
+    ln -sf bzImage-initramfs-${KERNEL_IMAGE_NAME}.bin ${DEPLOYDIR}/bzImage
     echo "${PV}" > ${DEPLOYDIR}/kernel.version
 }
 
diff --git a/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel_4.9.135.bb b/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel_4.9.135.bb
new file mode 100644
index 0000000..bfe1f48
--- /dev/null
+++ b/meta-citadel/recipes-kernel/citadel-kernel/citadel-kernel_4.9.135.bb
@@ -0,0 +1,22 @@
+require citadel-kernel.inc
+
+DAPPER_PATCH = "4.9.135-2018-10-26"
+
+SRC_URI = "\
+    https://cdn.kernel.org/pub/linux/kernel/v4.x/linux-${LINUX_VERSION}.tar.xz;name=kernel \
+    https://github.com/dapperlinux/dapper-secure-kernel-stable/raw/master/dapper-secure-kernel-patchset-${DAPPER_PATCH}.patch;name=patch \
+    \
+    file://defconfig \
+    file://ignore-sysroot-for-plugin-build.patch \
+    file://0114-smpboot-reuse-timer-calibration.patch \
+    file://0116-Initialize-ata-before-graphics.patch \
+    file://0117-WireGuard.patch \
+    file://0001-libata-Add-new-med_power_with_dipm-link_power_manage.patch \
+"
+SRC_URI[kernel.md5sum] = "4d131a974821f35baa784b566b60ba5e"
+SRC_URI[kernel.sha256sum] = "e023b0bbe9ea7fc56aa57210342dd18ea3e0900ee207226df1523c6d7df154ce"
+
+SRC_URI[patch.md5sum] = "ebb07d5cc90852c753e677bb2d31f9d9"
+SRC_URI[patch.sha256sum] = "529962f3b4d5ffa250f2b90636f1cbb21004fb48e76c2f4d2cc96e2d3fdbb6fe"
+
+