I'm searching for a good patch management solution for Linux systems, specifically needing support for RHEL, Alma, and Ubuntu. Ideally, the product would also provide features for configuration management, inventory tracking, and deployment of new systems. Since my Linux environment is growing, it's important that it be a commercial product with available support.
5 Answers
Satellite plus AAP (Ansible Automation Platform) could be a solid combo if you want powerful patch management.
If you're leaning towards Red Hat Satellite, you might also want to check out Atix Orcharhino. It's a commercial option based on Foreman/Katello and supports RHEL, Alma, and Ubuntu, among others.
Red Hat Satellite is probably your best bet if you're heavily invested in RHEL. It covers patching, provisioning, inventory, and configuration management through Puppet integration. It works pretty well with AlmaLinux due to its RHEL compatibility, but Ubuntu isn't a strong suit. For a dedicated Ubuntu solution, Canonical's Landscape is solid—it offers patching, monitoring, and basic config management but doesn’t support RHEL or Alma. If you're interested in a cross-platform option, SUSE Manager could be a good fit; it supports all three systems and includes patch management and configuration management with Salt. Plus, it comes with commercial support and has been around for a while, so it's fairly mature.
I totally agree! Landscape for Ubuntu, Satellite for RHEL, and SUSE Manager for everything else is the way to go. You could also consider using Ansible for patching if you need something more flexible.
Honestly, I feel like they all have their issues to some extent.
For your needs, SureMDM Linux management could be a great choice. It manages patches, handles deployments, and offers 24/7 support while giving you complete visibility into your Linux devices. I suggest trying out their trial to see if it fits your requirements.
How's Foreman/Katello been performing lately? The last time I tried it, it had a lot of issues with patch detection and reporting, which made me abandon it. Has it improved?