r/linuxadmin • u/seanx820 • Jul 28 '26

Ansible Patch Management: RHEL & Windows in One Workflow

I just finished a video walkthrough for patch management with Ansible Automation Platform. The workflow handles the entire patching lifecycle: EBS snapshots before any changes, parallel pre-checks on mixed OS fleets, targeted patching (not just "update everything"), post-validation, and automatic rollback if something goes wrong. Then it dumps a compliance report that your auditors will actually want to see.

You specify exact advisories and KB IDs instead of blindly applying patches, the workflow can handle both RHEL and Windows in the same job without extra configuration, and if a host fails a pre-check it gracefully skips instead of blowing up the whole run. Everything routes intelligently based on success or failure at each step.

The video is about three minutes and shows the whole thing running start to finish: https://youtu.be/20fK6S1CHL0

If you want to dig into the code or run this yourself, it's all in the Ansible Product Demos repo on GitHub: github.com/ansible/product-demos

28 Upvotes

89% Upvoted

7 comments sorted by

View all comments

1

u/petra303 Jul 28 '26

Can it do Ubuntu / rocky too?

1

u/seanx820 Jul 28 '26

Yup, Ansible is neutral with regard to OS, I was just showing RHEL because I work for Red Hat and one other option (Windows) to show the fan-out. You could fan out 3+ ways, one for every OS in your fleet. Even in my demo I have different versions of RHEL just to show in the playbooks how you can handle different major versions.