Bugs go to GitHub Issues. Questions go to GitHub Discussions. Feature ideas belong here. Read the full guide
Sometimes wy try update system with small /boot partition. Old school with small separate /boot. Kernel update can not fit to this partition. So, we need login to machine and make "apt autoremove" to clean unneeded packages and free up /boot partition.
Details / Description First of all, thank you for developing such a great product! The current state of PatchMon is fantastic, and having a single dashboard for monitoring and RDP access across different operating systems is a huge time-saver for systems engineers. Great work to the whole team. To make it even more powerful, I would like to request automated patch deployment capabilities for Windows clients. Currently, we can perfectly monitor pending updates and risk levels for Windows ...
It would also be great, if a patch policy would be able to filter for specific patch severity levels. In general I would like to e.g. apply security patches automatically immedeatly while regular updates/bugfixes can go in weekly after review. I think this is a fairly common use-case. And while the later can be done with the current patching mechanic, the automatic security only patching would be a big plus.
Sometimes I am struggling with some packages having unexpected side effects after an update. Example: Docker changed it's minimum API version after updating to version 29. It would be very nice, if I could pin package versions (with apt-mark) on my machines, until I am ready to update.
What is the installation method of your PatchMon server? _No response_ ### What is the version of your PatchMon server? v2.0.2 ### Briefly describe the feature Add support for Update all and reboot manually and automatically ### Detailed description This is a cool project, but I am missing important features to update all devices and then reboot. ### Why is this useful? Right now I only use Patchmon to see pending updates. Then I use ansible to carry out these updates and reboot...
I have clients with Windows computers and it is so cool that it allows me to patch and check compliance however it would be even cooler if PatchMon worked for Windows OS Patching!
In our case, PatchMon communicates with Nginx Proxy Manager over an unencrypted HTTP connection (default port 3000). While HTTPS is available for external client access via Nginx Proxy Manager, the backend connection between Nginx Proxy Manager and PatchMon remains unencrypted. For corporate environments with strict security or compliance requirements, all internal traffic must also be encrypted. This currently prevents us from deploying PatchMon. It would be very helpful if PatchMon suppor...
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Patch multiple hosts at once ### Detailed description Love the new patching feature in 2.0.0, it's been working great so far! Unfortunately, unless I'm missing something, it seems like you need to manually patch individual hosts. It would be great to be able to select a group, or even use the checkboxes to select...
Every new host, whether it comes in through an auto-enrollment token or "Add host", starts with Agent Auto-Update off. That happens even when automatic agent updates are switched on globally in Settings. So every new host has to be found and switched on by hand. It's easy to miss, because a new host reports and looks healthy either way. Request: let new hosts pick up a configurable default. Any of these would work: - a global "Agent Auto-Update for new hosts" setting, next to the ex...
Currently, PatchMon shows when a package has a Security Update Available, but it would be very useful to also show the CVE and CVSS severity associated with that update. For example: PackageCVECVSSSeverityopensslCVE-2026-XXXX9.8CriticalopensshCVE-2026-YYYY7.5High Suggested features - Show the CVE ID associated with a security update. - Show the CVSS score and severity (Critical/High/Medium/Low). - Show the highest CVSS score when an update fixes multiple CVEs. - Allow ...
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add a PatchMon CLI to quickly interact with a PatchMon server from the terminal. ### Detailed description The goal is to provide a command-line utility for common PatchMon server actions without requiring users to go through the web interface. Initially, this CLI is not intended to cover every PatchMon server feature. Instead, it s...
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add support for scheduled patching policies with weekly/monthly/quarterly recurrences and pre-patch email notifications. ### Detailed description Currently, PatchMon supports scheduled patching where an admin can approve a patch run and schedule it for a specific future maintenance window. However, this still requi...
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Policy schedule ### Detailed description Allow to plan host patching by schedule like daily, weekly, monthly or crontab values. Not all hosts must be patched daily in production. ### Why is this useful? This will reduce the change management and risk of hosts running in production.
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add support to run patching on apk ### Detailed description Currently its not possible to run patches from PatchMon on Alpine. If you try to run a patch it will abort with an error: package manager "apk" not supported for patching Please enable the new patching feature from PatchMon also for apk, as this feature...
I would like to suggest adding an option to customize the command used by the agent when performing package updates. Use case When PatchMon runs an APT upgrade, the process can fail or become non-interactive when a package has a modified configuration file and a new version of that configuration file is available. For unattended server patching, I would like to be able to pass the following options to apt: -o Dpkg::Options::="--force-confdef" \ `-o Dpkg::Options::="--force-confo...
What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Support updating containers via Proxmox Community Scripts ### Detailed description This would save a lot of time so we wouldn't need to run update on containers to upgrade the application. As it stands, it seems like only apt-based updates are performed via PatchMon, and updates that run via Community Scripts f...
It would be beneficial to add "Need Reboots" to the scheduled reports options to report how many and which hosts need a reboot after patching.
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Execute script or command before or after patching host ### Detailed description Extend patching policies with actions feature and fields for "script to run before/after patching" with optional and or default settings for "timeout in seconds", "command modes" like must succeed, ignore failures, run asynchronously - ignore failures....
There is a tool called topgrade that updates pacman/apt/nala/dnf/rpm-ostree, flatpak, snap, cargo, npm, containers, repos and more. It would be nice to have the ability to see and update those repositories from patchmon. This would allow us to patch applications and containers that are not in the standard distro repository, furthering the security on our systems
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Filter the Hosts list by kernel version (exact match, "less than", or a version range), so we can quickly find hosts within an affected version range when a new kernel CVE drops, across multiple distros. ### Detailed description Is your feature request related to a problem? Please describe. When a new Linux kernel CVE drops (e.g...
