RHEL patching strategy for small environment

Posted on

I've taken ownership of a few RHEL servers and thought I'd post for some sysadmin advice. I'm looking to put together a patching strategy for a small environment.

Considerations:
3 x Production RHEL VM servers (Will likely scale but won't be significant numbers)
Sysadmin overhead. We have a small team. Windows servers are patched using MECM (centralized). We don't have any way currently to do centralized Linux patching.

I currently have DNF Automatic configured to download but not apply the security updates. I will have to patch these manually (likely monthly) for the time being until I find a better solution.

Suggestions greatly appreciated!!!

Responses