Bugs go to GitHub Issues. Questions go to GitHub Discussions. Feature ideas belong here. Read the full guide
Sometimes wy try update system with small /boot partition. Old school with small separate /boot. Kernel update can not fit to this partition. So, we need login to machine and make "apt autoremove" to clean unneeded packages and free up /boot partition.
It would also be great, if a patch policy would be able to filter for specific patch severity levels. In general I would like to e.g. apply security patches automatically immedeatly while regular updates/bugfixes can go in weekly after review. I think this is a fairly common use-case. And while the later can be done with the current patching mechanic, the automatic security only patching would be a big plus.
Sometimes I am struggling with some packages having unexpected side effects after an update. Example: Docker changed it's minimum API version after updating to version 29. It would be very nice, if I could pin package versions (with apt-mark) on my machines, until I am ready to update.
I have clients with Windows computers and it is so cool that it allows me to patch and check compliance however it would be even cooler if PatchMon worked for Windows OS Patching!
In our case, PatchMon communicates with Nginx Proxy Manager over an unencrypted HTTP connection (default port 3000). While HTTPS is available for external client access via Nginx Proxy Manager, the backend connection between Nginx Proxy Manager and PatchMon remains unencrypted. For corporate environments with strict security or compliance requirements, all internal traffic must also be encrypted. This currently prevents us from deploying PatchMon. It would be very helpful if PatchMon suppor...
What is the installation method of your PatchMon server? _No response_ ### What is the version of your PatchMon server? v2.0.2 ### Briefly describe the feature Add support for Update all and reboot manually and automatically ### Detailed description This is a cool project, but I am missing important features to update all devices and then reboot. ### Why is this useful? Right now I only use Patchmon to see pending updates. Then I use ansible to carry out these updates and reboot...
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Patch multiple hosts at once ### Detailed description Love the new patching feature in 2.0.0, it's been working great so far! Unfortunately, unless I'm missing something, it seems like you need to manually patch individual hosts. It would be great to be able to select a group, or even use the checkboxes to select...
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add a PatchMon CLI to quickly interact with a PatchMon server from the terminal. ### Detailed description The goal is to provide a command-line utility for common PatchMon server actions without requiring users to go through the web interface. Initially, this CLI is not intended to cover every PatchMon server feature. Instead, it s...
I would like to suggest adding an option to customize the command used by the agent when performing package updates. Use case When PatchMon runs an APT upgrade, the process can fail or become non-interactive when a package has a modified configuration file and a new version of that configuration file is available. For unattended server patching, I would like to be able to pass the following options to apt: -o Dpkg::Options::="--force-confdef" \ `-o Dpkg::Options::="--force-confo...
Currently, PatchMon shows when a package has a Security Update Available, but it would be very useful to also show the CVE and CVSS severity associated with that update. For example: PackageCVECVSSSeverityopensslCVE-2026-XXXX9.8CriticalopensshCVE-2026-YYYY7.5High Suggested features - Show the CVE ID associated with a security update. - Show the CVSS score and severity (Critical/High/Medium/Low). - Show the highest CVSS score when an update fixes multiple CVEs. - Allow ...
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add support for scheduled patching policies with weekly/monthly/quarterly recurrences and pre-patch email notifications. ### Detailed description Currently, PatchMon supports scheduled patching where an admin can approve a patch run and schedule it for a specific future maintenance window. However, this still requi...
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Policy schedule ### Detailed description Allow to plan host patching by schedule like daily, weekly, monthly or crontab values. Not all hosts must be patched daily in production. ### Why is this useful? This will reduce the change management and risk of hosts running in production.
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add support to run patching on apk ### Detailed description Currently its not possible to run patches from PatchMon on Alpine. If you try to run a patch it will abort with an error: package manager "apk" not supported for patching Please enable the new patching feature from PatchMon also for apk, as this feature...
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Support updating containers via Proxmox Community Scripts ### Detailed description This would save a lot of time so we wouldn't need to run update on containers to upgrade the application. As it stands, it seems like only apt-based updates are performed via PatchMon, and updates that run via Community Scripts f...
If its possible to have a option tu automatic update by severity an by a schedule (one a day at XXh XXm, one a week, evry 3 days, etc ?)
It would be beneficial to add "Need Reboots" to the scheduled reports options to report how many and which hosts need a reboot after patching.
There is a tool called topgrade that updates pacman/apt/nala/dnf/rpm-ostree, flatpak, snap, cargo, npm, containers, repos and more. It would be nice to have the ability to see and update those repositories from patchmon. This would allow us to patch applications and containers that are not in the standard distro repository, furthering the security on our systems
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Filter the Hosts list by kernel version (exact match, "less than", or a version range), so we can quickly find hosts within an affected version range when a new kernel CVE drops, across multiple distros. ### Detailed description Is your feature request related to a problem? Please describe. When a new Linux kernel CVE drops (e.g...
I would like to be able to specify from what IP to limit the admin interface to be accessible from. This should be a single IP a range or a mixture of this. cannot be done now as it would affect the agents I believe using normal reverse proxy rules.
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Execute script or command before or after patching host ### Detailed description Extend patching policies with actions feature and fields for "script to run before/after patching" with optional and or default settings for "timeout in seconds", "command modes" like must succeed, ignore failures, run asynchronously - ignore failures....
