ProxPatch

ProxPatch is a rolling patch orchestration tool for Proxmox VE clusters. It is intended to automate the repetitive task of keeping cluster nodes updated, and its central workflow is described as zero-touch node patching with controlled rolling updates that avoid downtime and manual intervention.

The tool drains, migrates, patches, and reboots nodes in sequence. Its documented flow starts by inspecting cluster state through pvesh, then checking which nodes have pending package updates over SSH. It applies package upgrades on the drained node, uses native Proxmox tooling to live-migrate running guests away from the target node, and performs a controlled reboot only when required. The page also says it verifies cluster health before touching each node, does not proceed when the cluster is degraded or quorum is at risk, and logs each step with timestamps so the process is visible and auditable. It notes that ProxPatch reboots only when genuinely required and skips unnecessary restarts if updates do not require a kernel change.

The tool is described as built for real clusters, from homelab setups to production environments. It is said to work equally well on a 2-node homelab and a 20-node production cluster, and to play nicely with ProxLB. The page also states that ProxPatch is not a full lifecycle manager or an HA replacement, and that it focuses on one task: rolling patch orchestration for Proxmox VE.

Installation is presented through an official repository and Debian package management. The quick start describes adding a GPG key, registering the repository, and installing the proxpatch package on one node in the cluster. The page says it has no external dependencies, uses only native Proxmox tools such as pvesh, qm, and SSH, and is compatible with Debian bookworm and trixie as well as Proxmox VE 8.x and 9.x environments. It is identified as a project by gyptazy.