Feedback - PatchMon LTD

How the Feedback Portal works

Bugs go to GitHub Issues. Questions go to GitHub Discussions. Feature ideas belong here. Read the full guide

NixOS support

Native package for agent setup. Support for Nix package manager in agent.

Add "apt autoremove" option

Sometimes wy try update system with small /boot partition. Old school with small separate /boot. Kernel update can not fit to this partition. So, we need login to machine and make "apt autoremove" to clean unneeded packages and free up /boot partition.

Zbig·3 months ago4

New / Open / Unreviewed

Automatic patching with patch severity filters

It would also be great, if a patch policy would be able to filter for specific patch severity levels. In general I would like to e.g. apply security patches automatically immedeatly while regular updates/bugfixes can go in weekly after review. I think this is a fairly common use-case. And while the later can be done with the current patching mechanic, the automatic security only patching would be a big plus.

Thorsten Kunz·2 months ago5

New / Open / Unreviewed

[Feature]: Update all, and reboot options

What is the installation method of your PatchMon server? _No response_ ### What is the version of your PatchMon server? v2.0.2 ### Briefly describe the feature Add support for Update all and reboot manually and automatically ### Detailed description This is a cool project, but I am missing important features to update all devices and then reboot. ### Why is this useful? Right now I only use Patchmon to see pending updates. Then I use ansible to carry out these updates and reboot...

PatchingIntegrations

shiny-sand·5 months ago20

New / Open / Unreviewed

Allow ignoring and unignoring specific patches/packages inside PatchMon

A feature should be implemented in the Patchmon web interface that allows specific patches or packages to be marked as “ignored,” either permanently or temporarily. This status must also be removable through the web interface. Our infrastructure includes packages that we intentionally patch manually—for example, because of custom configurations, internal dependencies, or business-critical applications. These packages currently continue to appear in PatchMon as pending (or failed) updates, cl...

Ben·5 days ago

New / Open / Unreviewed

Detect "reboot required" when a loaded kernel module no longer matches the installed driver packages (e.g. NVIDIA)

Environment: PatchMon server 2.1.6, agent 2.1.6, Debian 13 VM (Proxmox, GPU passthrough). Problem After a routine apt upgrade, the NVIDIA userspace libraries were updated (615.71.09 -> 615.71.10) while the already loaded kernel module stayed at 615.71.09. The kernel itself did not change. The GPU became unusable (nvidia-smi: "Driver/library version mismatch", CUDA\_ERROR\_NO\_DEVICE, Plex fell back to software transcoding and playback stuttered) until the VM was rebooted. PatchM...

Elaktyl·2 days ago

New / Open / Unreviewed

Support for Podman

Doing 'podman compose up -d' doesnt work out of the box , it would be great to have podman support. Thank you.

Error_404·5 days ago

New / Open / Unreviewed

Update services using configuration files

Hi, after trying to patch the Zabbix client, I realized that it isn't currently possible because during the update, the "apt" command asks a question about the configuration file, and Patchmon isn't designed to handle this kind of situation. Could a future release address this issue? Thx,

LooPinG·2 days ago

New / Open / Unreviewed

Be Able To Hide Codenames

It'll make the dashboard panel much more usable, and the table a lot less space-wastey.

William Roush·2 days ago

New / Open / Unreviewed

Mandatory approval based on the host group

Mandatory approval based on the host group. For instance, there are test hosts that can be updated at any time, while other groups—such as a "critical" group—can only be updated upon approval. This could be implemented within the group settings—right where you select the group color—by simply adding a checkbox, something like "Mandatory approval."

Sergey Brovko·2 days ago

New / Open / Unreviewed

[Feature]: Patch multiple hosts at once

What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Patch multiple hosts at once ### Detailed description Love the new patching feature in 2.0.0, it's been working great so far! Unfortunately, unless I'm missing something, it seems like you need to manually patch individual hosts. It would be great to be able to select a group, or even use the checkboxes to select...

PatchingUi

krestaino·6 months ago18

New / Open / Unreviewed

[Feature]: Implement Recurring Patching Policies (Weekly, Monthly, Quarterly) with Pre-Patch Alerts

What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add support for scheduled patching policies with weekly/monthly/quarterly recurrences and pre-patch email notifications. ### Detailed description Currently, PatchMon supports scheduled patching where an admin can approve a patch run and schedule it for a specific future maintenance window. However, this still requi...

PatchingReporting

axiades·6 months ago10

New / Open / Unreviewed

Feature Request: Show CVE and CVSS for Security Updates

Currently, PatchMon shows when a package has a Security Update Available, but it would be very useful to also show the CVE and CVSS severity associated with that update. For example: PackageCVECVSSSeverityopensslCVE-2026-XXXX9.8CriticalopensshCVE-2026-YYYY7.5High Suggested features - Show the CVE ID associated with a security update. - Show the CVSS score and severity (Critical/High/Medium/Low). - Show the highest CVSS score when an update fixes multiple CVEs. - Allow ...

Noor·2 months ago3

New / Open / Unreviewed

Add an inventory option that allows for export via CSV.

Retrieve more detailed information about a host—such as CPU, RAM (in gigabytes), architecture, and operating system—to populate the inventory section.

Alexandre Prado·12 days ago

New / Open / Unreviewed

Expose compliance summary on the Integration API (hosts include=stats and integrations)

Originally raised by @mrjoshuap on GitHub: https://github.com/PatchMon/PatchMon/issues/1189 ## Summary The scoped Integration API (Basic Auth with host:get) already returns rich host data through GET /api/v1/api/hosts?include=stats: reboot state, update counts, security updates, OS and reporting state. Compliance data is only available under /api/v1/compliance/*, which needs a browser session with compliance permissions. That means ...

Integrations

M. Ibrahim (Admin)·13 days ago

New / Open / Unreviewed

Native HTTPS Support / SSL for the PatchMon web server

In our case, PatchMon communicates with Nginx Proxy Manager over an unencrypted HTTP connection (default port 3000). While HTTPS is available for external client access via Nginx Proxy Manager, the backend connection between Nginx Proxy Manager and PatchMon remains unencrypted. For corporate environments with strict security or compliance requirements, all internal traffic must also be encrypted. This currently prevents us from deploying PatchMon. It would be very helpful if PatchMon suppor...

Cynexx·3 months ago5

New / Open / Unreviewed

Add option to pin packages with "apt-mark hold"

Sometimes I am struggling with some packages having unexpected side effects after an update. Example: Docker changed it's minimum API version after updating to version 29. It would be very nice, if I could pin package versions (with apt-mark) on my machines, until I am ready to update.

Code-Wizard·2 months ago

New / Open / Unreviewed

Adopt patchmon.core 2.0 as the official Ansible collection

Please adopt patchmon.core 2.0.0 as the official Ansible collection, replacing patchmon.dynamic\_inventory 1.0.0. The break is the dynamic inventory: install patchmon.core and set plugin: patchmon.core.inventory. Modules, roles, a lookup, and inventory filters are documented for advanced Ansible users. I run 2.0.0 in my homelab from the release tarball. It has tests, ansible-lint, and argument specs. Built in Cursor with Grok. Proposal: [mrjoshuap.github.io/PatchMon-ansible/docsite/proposal...

Josh Preston·11 days ago6

New / Open / Unreviewed

Docker update check: check the tag of a tag@sha256 reference instead of reporting "Pinned digest"

What happens (agent 2.1.6): a container started from lscr.io/linuxserver/radarr:latest@sha256:270f… shows Pinned digest and is never checked against the registry. planImageChecks / pinnedOnlyTargets in agent-source-code/internal/integrations/docker/updatecheck.go emit ImageCheckPinned with no remote lookup, on the reasoning that the reference "cannot change". Why that loses information: pinning tag@digest is the recommended way to make a compose file reproducible (Ren...

Steven Santacroce·4 days ago

New / Open / Unreviewed

[Feature]: Pre and post actions for patching

What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Execute script or command before or after patching host ### Detailed description Extend patching policies with actions feature and fields for "script to run before/after patching" with optional and or default settings for "timeout in seconds", "command modes" like must succeed, ignore failures, run asynchronously - ignore failures....

Patching

EiTiFuzzi·5 months ago12