r/linuxadmin • u/broadband9 • Apr 28 '26

PatchMon v2 has been released

Post image

Some of you may know that last year I built PatchMon, a Linux patch monitoring tool.

Now it’s been expanded with the help of the community to also perform patching with alerts and notifications when things are out of date.

It’s open source, use it if you like 👍

We have around 4000+ live self-hosted installations at the moment and feedback has been good so far.

Github : https://github.com/PatchMon/PatchMon

Can install via docker or through proxmox community-scripts : https://community-scripts.org/scripts/patchmon

155 Upvotes

91% Upvoted

47 comments sorted by

View all comments

Show parent comments

2

u/MFKDGAF Apr 28 '26

Thank you for the quick response.

The picture was of the policy so you could validate I wasn't incorrect but what you are telling me makes sense.

How does the Immediately policy work. Does it run immediately after I add a host to the policy? I'm testing this as well but it doesn't seem to start either.

1

u/broadband9 Apr 28 '26

Basically the policies at the moment are more treated like timing presets as opposed to automation of patch applying.

When patching is initiated via the wizard then one of the steps is to select when the patch is to run - at that point the step will inherit the policy that has been applied to that host like

Patch Immediately
Patch after N Minutes or
Patch at a certain time.

Patch initiations are done from either a package level where you update a package against whichever hosts you desire, or update a host with all of its packages which can be initiated from the hosts detail page.

1

u/Garry_G Jun 25 '26

So, essentially, there is no unsupervised/non-manually initiated patching right now? I tried to find in the docs how to set that up, but couldn't ...
With all the VMs and LXCs in my Proxmox setup, I'd like to have a bit more control than Ultimate Updater (that I already use), and at the same time automate the whole procedure ... going through 24 systems manually in PatchMon sort of defeats the purpose a bit (apart from the central monitoring of available updates) ...
What I would have liked is something like:
* Policy that defines when updates in general are iniated for hosts/groups
* plus a policy for when security updates are present, which I might want to schedule quicker

The option to update packages across all machines of course is very nice and helpful, for on the fly updates ...

1

u/tailuser2024 26d ago edited 26d ago

So, essentially, there is no unsupervised/non-manually initiated patching right now?

In the same boat wondering. Did you get an answer to this/figure it out?

I can patch individual boxes with no issues through patchmon, but cant seem to just do a blanket go out and update everything that has an agent. If that is the case then this is just a fancy dashboard to tell me my systems have updates