diff --git a/debian/TODO b/debian/TODO
index 30c6041..43b37ce 100644
--- a/debian/TODO
+++ b/debian/TODO
@@ -11,7 +11,3 @@ TODO
    copy_exec, maybe use dracut copy logic.
 
  o root loop support.
-
- o Currently updating linux-image-foo and linux-image-foo-signed builds a
-   broken initramfs (without module signatures) and then a working one
-   (with signatures).  This is both dangerous and a waste of time.
diff --git a/kernel/signed_postinst.d/initramfs-tools b/kernel/signed_postinst.d/initramfs-tools
deleted file mode 100755
index 856774a..0000000
--- a/kernel/signed_postinst.d/initramfs-tools
+++ /dev/null
@@ -1,22 +0,0 @@
-#!/bin/sh -e
-
-version="$1"
-
-command -v update-initramfs >/dev/null 2>&1 || exit 0
-
-# passing the kernel version is required
-if [ -z "${version}" ]; then
-	echo >&2 "W: initramfs-tools: ${DPKG_MAINTSCRIPT_PACKAGE:-signed kernel package} did not pass a version number"
-	exit 2
-fi
-
-# avoid running multiple times
-if [ -n "$DEB_MAINT_PARAMS" ]; then
-	eval set -- "$DEB_MAINT_PARAMS"
-	if [ -z "$1" ] || [ "$1" != "configure" ]; then
-		exit 0
-	fi
-fi
-
-# we're good - create initramfs.  update runs do_bootloader
-INITRAMFS_TOOLS_KERNEL_HOOK=1 update-initramfs -c -t -k "${version}" >&2