Run permission fix only once per container

kernel.go

@@ -620,8 +620,8 @@ func genDockerKernels(dii dockerImageInfo, newkcfg *config.KernelConfig,
 			RootFS: rootfs,
 		}
 		newkcfg.Kernels = append(newkcfg.Kernels, ki)
+	}
 
-		log.Info().Msg("Fix permissions...")
 	for _, cmd := range []string{
 		"find /boot -type f -exec chmod a+r {} \\;",
 	} {
@@ -630,7 +630,6 @@ func genDockerKernels(dii dockerImageInfo, newkcfg *config.KernelConfig,
 			return
 		}
 	}
-	}
 
 	return
 }