PatchPilot

Paid APIiPhoneLinuxSelf-hostedWeb

What PatchPilot is

PatchPilot is a free, open-source patch management system for self-hosted homelabs and small Linux environments. Its web dashboard shows pending updates, security patches, uptime, reboot requirements, and job history across managed nodes. It supports APT-based Debian and Ubuntu systems, DNF-based Fedora, RHEL, and AlmaLinux systems, plus Home Assistant OS. Agents connect outward to the server and poll for work, avoiding inbound access or SSH orchestration on managed virtual machines. Cron-based rules let you define patch windows, reboot schedules, and update checks for each node. Telegram bot and SMTP email alerts can report events, while a Prometheus endpoint feeds Grafana dashboards and alerting pipelines. Admin, User, and Read-Only permissions separate access. The server runs in Docker or on Debian or Ubuntu bare metal through a web interface. Security controls listed include SHA-256 agent-token hashing, five-minute registration-key expiry, PBKDF2-SHA256, TLS 1.2 or newer, SSRF checks, and systemd hardening. PatchPilot uses GPL-3.0. Its iPhone and iPad companion depends on a running server.

Who it suits

PatchPilot suits homelab operators, self-hosters, and small internal teams managing Linux nodes. It fits users who want scheduled patching, role-based dashboard access, and Telegram, SMTP, or Prometheus notifications in a self-hosted setup.

What it does well

Free and open source under GPL-3.0
Tracks updates, security patches, uptime, reboots, and job history
Supports Debian, Ubuntu, Fedora, RHEL, AlmaLinux, and Home Assistant OS
Outbound-polling agents avoid inbound access and SSH orchestration
Cron schedules handle patch windows, reboots, and update checks
Telegram, SMTP, and Prometheus integrations provide operational alerts

What to know first

Requires self-hosted server deployment
Mobile companion cannot operate without a running PatchPilot server
iPhone and iPad are the listed mobile platforms

Getting started

Deploy the server with Docker or on Debian or Ubuntu bare metal
Open the PatchPilot web interface
Connect agents that poll the server for jobs
Define cron-based patch, reboot, and update-check schedules
Configure Telegram or SMTP event alerts
Use the dashboard and permission levels to manage nodes

Verdict

Choose PatchPilot if you manage a homelab or small Linux fleet and want self-hosted scheduling, visibility, and alerts. Look elsewhere if you need a standalone mobile service or a deployment model outside its Docker and Debian/Ubuntu server options.

Questions

Is PatchPilot free?

Yes. PatchPilot is free and open source under the GPL-3.0 license.

Which systems does it support?

The listed systems are Debian, Ubuntu, Fedora, RHEL, AlmaLinux, and Home Assistant OS.

Does the mobile app work alone?

No. PatchPilot Mobile for iPhone and iPad requires a running PatchPilot server.

How can alerts be delivered?

PatchPilot can send notifications through a Telegram bot or email using SMTP.

What deployment options are available?

The server can run in Docker or be installed on Debian or Ubuntu bare metal, with a web UI.

Facts from PatchPilot's own pages

Access control: PatchPilot provides Admin, User, and Read-Only permission levels. · patch-pilot.app, 4 Oct 2026
Access controls: The dashboard has Admin, User, and Read-Only permission levels. · patch-pilot.app, 11 Oct 2026
Agent model: Agents initiate connections to the server and poll for jobs, so the server does not need inbound access to managed VMs. · patch-pilot.app, 11 Oct 2026
Alerts: PatchPilot can send event notifications through a Telegram bot or email via SMTP. · patch-pilot.app, 11 Oct 2026
Dashboard: Its real-time dashboard tracks pending updates, security patches, uptime, reboot requirements, and job history across Linux nodes. · patch-pilot.app, 11 Oct 2026
Deployment: The install page describes Docker deployment and bare-metal installation on Debian or Ubuntu, with systemd service management. · patch-pilot.app, 11 Oct 2026
Fleet dashboard: The dashboard tracks pending updates, security patches, uptime, reboot requirements, and job history across nodes. · patch-pilot.app, 4 Oct 2026
Integrations: PatchPilot provides a Prometheus metrics endpoint and says its metrics can be used with Grafana dashboards and alerting pipelines. · patch-pilot.app, 11 Oct 2026
Intended users: The site identifies homelab operators, small internal teams, and self-hosters as intended users. · patch-pilot.app, 11 Oct 2026
License: PatchPilot is described as self-hosted and open source under the GPL-3.0 license. · patch-pilot.app, 11 Oct 2026
Mobile app: PatchPilot Mobile is described as an iPhone and iPad companion that requires a running PatchPilot server and does not work as a standalone service. · patch-pilot.app, 11 Oct 2026
Mobile companion: PatchPilot Mobile is an iPhone and iPad companion that requires a running PatchPilot server and does not work as a standalone service. · patch-pilot.app, 4 Oct 2026
Patch support: The site lists APT support for Debian and Ubuntu and DNF support for Fedora, RHEL, and Alma. · patch-pilot.app, 4 Oct 2026
Purpose: PatchPilot is a self-hosted Linux patch management system built for homelab operators and small environments. · patch-pilot.app, 11 Oct 2026
Scheduling: The site describes cron-based scheduling for patch windows, reboot schedules, and update checks per node. · patch-pilot.app, 11 Oct 2026
Security: The site says per-agent tokens use SHA-256 hashing, registration keys expire after five minutes, and agent connections use TLS 1.2 or later. · patch-pilot.app, 11 Oct 2026
Support: The support page directs users to the project documentation and GitHub Issues for setup help, bug reports, and support requests. · patch-pilot.app, 11 Oct 2026
Supported systems: The site lists Debian and Ubuntu using APT, Fedora, RHEL and Alma using DNF, and Home Assistant OS support. · patch-pilot.app, 11 Oct 2026

Where PatchPilot stands on Freedom251

Patch Management Software#38 of 49