THE MR PATCHY FIELD GUIDE
Good documentation.
Fewer wild guesses.
From your first install to your next incident review. Practical guides for the people keeping Linux running.
53 guides to the workbench.
Start here
Personal & commercial licensing
Free for personal, nonprofit and local government use within the license terms.
Read guideWelcome to the workbench
Understand the controller, connect a server and make your first reviewed patch.
Read guideController installation & HTTPS
Docker Compose, network bindings, local trust and certificate profiles.
Read guideEnroll your first server
A three-step workflow with independent installation verification.
Read guideFind and change workspace settings
Navigate focused Settings pages with role-aware search, clear actions and accessible feedback.
Read guideFleet management
Server workspaces & lifecycle
Everything recorded for a server, in a consistent set of tabs.
Read guideEvent delivery, spool health & recovery
Keep collected observations durable, diagnose delivery pressure and retain an honest loss history.
Read guideRepair an existing server connection
Pin a trusted fingerprint, rerun the installer and verify a different transport on the same server record.
Read guideNative cloud transports to the endpoint agent
Reach the existing Mr Patchy endpoint agent through supported AWS, Google Cloud and Azure APIs.
Read guideAsset groups, policy inheritance & scoped roles
Organize hosts by ownership and operational purpose, and preview the resulting access and policy.
Read guideFleet reports, lifecycle & resource health
See which systems need attention and drill from a fleet measure to its evidence.
Read guidePatching
Review & install updates
Inventory, dependency previews and reviewed exact-version batches.
Read guideSchedules, windows & rollouts
Timezone-aware patching with canaries, urgency rules and recovery gates.
Read guideRepositories, trust & mirrors
Signed metadata, source configuration and scoped access.
Read guideDistribution release upgrades
Review the whole transition, then make one go/no-go decision.
Read guideOS upgrade notices & server badges
See an offered distribution upgrade on the dashboard and wherever a server appears.
Read guideAvailable patches across the fleet
Open one permission-scoped list of available package updates from the main menu or Overview.
Read guideFirmware inventory, rollout & recovery
Discover, review and verify firmware on supported devices, from trusted catalog to running version.
Read guideRollout rings, freezes & application health
Control how far a rollout advances and verify services at every stage.
Read guideConflicting scripts & scheduled maintenance
Find maintenance jobs that compete with patching, reboots or firmware actions, and review reversible changes.
Read guideSecurity & response
Behavior, provenance & eBPF
Understand running processes and the evidence behind their identities.
Read guideScanning & incident review
ClamAV, YARA, coverage receipts and the incident timeline.
Read guideFile integrity & startup baselines
Compare native package state, authenticated artifacts and custom scope.
Read guideAI assistance & diagnostics
Explained scores, evidence-led investigations and visible run history.
Read guidePer-server AI pause & resume
Stop AI requests for one server while inventory, patching and deterministic protection keep running.
Read guideCVE exposure & automatic containment
Monitor exploitation between CVE publication and an effective fix, with policy-authorized quarantine or process termination.
Read guideKnown & unknown malware response
Investigate malware with or without a signature or CVE, then act within an explicitly enabled policy.
Read guideStartup & scheduled-task awareness
Know what runs at boot, login or on a schedule—and whether it matches a verified default.
Read guideReviewed response & remediation
Preserve, contain, repair and verify through separate approvals.
Read guideEvidence custody & retention
Portable records, protected archives and independent audit retention.
Read guideRead-only security posture & compliance
Review versioned configuration rules and their measured evidence without changing the target.
Read guideContainers, application dependencies & SBOM
Attribute software components and advisories to the workloads that actually use them.
Read guideIncident cases, ownership & exceptions
Coordinate investigation and follow-up around immutable detections and revisioned decisions.
Read guideAI & throughput
Parallel triage, timing & retries
Reduce queue delay without weakening the model, evidence or review boundaries.
Read guideAI throttling, daily caps & unthrottled mode
Control pacing, simultaneous work and estimated spending as three separate settings.
Read guideAI waits, provider backoff & recovery
See why work is waiting, when it can resume and which interruptions require a human review.
Read guideExact-match known-good reuse
Reuse a validated safe assessment across servers without paying for the same eligible investigation again.
Read guideAI providers, connections & feature routing
Choose named provider connections and compatible models independently for each AI workflow.
Read guideOperations
Users, MFA, SSO & keys
Named roles, session controls and verified SSH-key rotation.
Read guideLive notifications & attention alerts
A persistent bell, asynchronous updates and a durable per-user review center.
Read guideWorkers, databases & scale
Durable jobs, coordinated workers and offline database migration.
Read guideController & remote-worker deployments
Choose the deployment role, then provision the database, identity and shared state deliberately.
Read guideDeployment health & worker readiness
See expected components, missing nodes and the difference between alive, ready and current.
Read guideDedicated GCP integration node
Isolate cloud tooling and identity while retaining the target’s SSH trust and recovery semantics.
Read guideReboot, rollback & backups
Evidence-based recovery, encrypted backups and staged restore.
Read guideHistory, audits & exports
Trace package changes, operator actions and investigation decisions.
Read guideGoogle Cloud & IAP
Reach a VM through direct SSH or an authenticated IAP tunnel.
Read guideUpgrading & agent maintenance
Update the controller and verify collectors without losing the story.
Read guideTroubleshooting the workbench
Start with the failure stage and inspect the relevant evidence.
Read guideHigh availability with MySQL
Run redundant controllers and preserve authorization, shared state and operation ownership across failures.
Read guideDeployment discovery & dependency-aware self-patching
Discover the infrastructure Mr Patchy depends on and review a maintenance sequence that preserves service.
Read guideService credentials & external integrations
Connect approved automation, ticketing and SIEM workflows with scoped identities and durable delivery.
Read guideRecovery readiness & encryption-key custody
Separate backup coverage from verified restore and keep keys recoverable across rotations.
Read guideNo guides found. Try “SSH”, “backup” or “schedule”.