[Feature]: Patching policy
What is the installation method of your PatchMon server?
Docker
What is the version of your PatchMon server?
2.0.0
Briefly describe the feature
Policy schedule
Detailed description
Allow to plan host patching by schedule like daily, weekly, monthly or crontab values. Not all hosts must be patched daily in production.
Why is this useful?
This will reduce the change management and risk of hosts running in production.
11 Comments
but i'd also be interested in the update log for the other vms
i have fedora coreos on my vms and it layers its updates + reboots at predetermined times.
I can let unattended upgrade run, but for track & log update, it will be easier if patchmon offer this feature ^^
you could run a bash script or an ansible playbook on a schedule? I don't think patchmon offers that out of the box
I was looking for a patch policy setting for specific day (e.g. Patch Tuesday) so I concur with the suggestion of being able select a specific day, as well as time.
I can raise a separate feature if required.
With the compliance scanning this can be powerful, if vulnerabilities like high are detected or security patches exists, autopatch on next schedule. Also if reboot is required, give the option to enable a reboot at scheduled times. Then the whole thing is hand-off!
You are welcome, created issue #664
Yeah - today I'm going to do a sweep of the roadmap and existing issues that have been fixed or still pending etc. There are about 140+ issues that I need to tidy up. Some are issues and others are feature requests.
Issues are then added as part of the roadmap here : https://github.com/orgs/PatchMon/projects/2
With in regards to the host group exclusion then that is a real bug that I need to verify - could you do me a massive favour and open up a separate issue for that.
Really appreciate your support and you raising these :)
Thank you. This is a great release, well done. Do you have a roadmap which show the functionality planned. This can help to avoid requests which are already planned.
By the way, when using a host group in a policy and exclusion is required, all patchmon host are listed, not only the once of the host group.
Thanks - Automated filters and scheduling is planned as the next logic step.
We felt it's best to release V2.0.0 without this feature then improve and build upon it over the next few releases.
Preset examples that I feel like would be suitable :
- Patch Security updates Daily on selected host group at midnight
- Patch Any server that has the following package(s) outdated : "curl" on Sunday at 3pm
- Perform the following Pre patch & Post patch tasks
This is the direction we wish to plan in, hopefully that suits your requirement too :)
+1