Patching is easy to automate if you’re familiar with managing Linux boxes at scale, and have a test environment. Ansible on a cron, and the pipeline goes to pr

Patching is easy to automate if you’re familiar with managing Linux boxes at scale, and have a test environment. Ansible on a cron, and the pipeline goes to prod if the test environment passes. Or unattended upgrades in test, that fires a job to prod if it passes. Or a continuous build process with Packer to replace running instances once they pass. If you have certain things that can’t tolerate sudden downtime (a DB, etc.) then you need to know how to mask/hold those. All this to say, it’s easy if you already know the footguns. But IMO, if you don’t know them, you don’t really have any business running Linux boxes in prod.