Patching and Security Mitigation | Up and Running with Red Hat Satellite 03

By episode three we’ve installed Satellite and loaded it up with content, so now it’s time for the job most people actually buy Satellite for: keeping systems patched and secure. Richard Rios and I start with an honest recap of the build so far, including where the demo gods weren’t kind last time, then get into scheduling patch jobs and mitigating CVEs across a fleet.

A few things worth carrying away from this one:

• Patching at scale is about scheduling, not clicking. I show how to schedule jobs so you’re driving updates across many systems on your terms rather than logging into each box.
• CVEs are where Satellite pays off. Being able to see which vulnerabilities apply to your environment and push mitigation from one place changes how you handle security work.
• A good recap matters when you’re building live. Because we’d had some things blow up the previous week, I take time to walk back through the RHEL 8.10 install and setup so nobody’s lost. Live demos are honest demos.

This is the security workhorse episode. If patching and CVE remediation are eating your week, this is the one to watch.