ProxPatch

ProxPatch is a command-line tool designed to automate rolling patch updates for Proxmox VE clusters. It addresses the operational challenge of keeping Proxmox nodes updated without incurring downtime or requiring manual intervention. The tool is intended for a range of environments, from homelab setups to large production clusters, and focuses on providing zero-touch node patching while maintaining cluster health and availability.

The core functionality of ProxPatch involves a sequence of automated steps: it inspects the current cluster state using native Proxmox tools, identifies nodes with pending updates, drains and migrates virtual machines away from target nodes, applies necessary package upgrades via SSH, and performs controlled reboots only when required. Throughout the process, it ensures that no node is taken offline without safely relocating its guests, and it verifies the overall health of the cluster before proceeding at each step. The tool is transparent in its operations, providing detailed, timestamped logs for every action, making the update process fully observable and auditable.

ProxPatch is intentionally minimal and dependency-free, requiring no orchestration frameworks, external databases, or API tokens. It operates using only native Proxmox utilities such as pvesh and qm, and connects via SSH. x. com repository, ensuring package integrity with a signed GPG key and a straightforward installation process using standard Debian package management commands.

Developed by gyptazy, ProxPatch is not a full lifecycle manager or a replacement for high-availability solutions, but rather a focused utility for orchestrating rolling patch updates. It was created as a standalone project to address limitations in existing Proxmox APIs and is designed to work alongside other tools, such as ProxLB. The tool’s philosophy emphasizes safety, transparency, minimalism, and ease of modification, making it suitable for administrators seeking reliable and auditable automation for cluster maintenance.