Linux patching has long been a fragmented process, especially for teams managing mixed environments. In this series, Jason Wasser breaks down the complexities and shows how Tanium’s unified platform streamlines patching across Windows, Mac, and Linux.
Building on the success of the Zero Touch Windows patching Tech Talks episode, Jason walks through the mechanics of Linux patching using Tanium Patch and Tanium Automate, offering a strategic guide to reducing risk, saving time, and embracing automation. From repository management to scan prioritization and deployment configuration, he lays out a clear path to Zero Touch automation and Lite Touch patching that scales across enterprise environments.
Whether you're a seasoned sysadmin or a Windows-centric IT pro venturing into Linux territory, this series delivers practical insights into autonomous endpoint management—and why it’s time to move beyond manual patching.
Key takeaways
Part 1: Zero Touch
- Cross-platform patching made simple: Tanium provides a unified interface for patching Windows, Mac, and Linux, enabling teams to manage diverse environments with a common workflow.
- Understanding Linux patching fundamentals: Jason explains how Linux package managers (YUM, DNF, APT, etc.) and repositories work together to deliver patches.
“Tanium Patch can orchestrate the package manager to scan with the appropriate metadata as well as deploy patches across Windows and Linux.”Tanium Senior Advanced Consulting Engineer Jason Wasser
- Zero Touch patching for Linux: Learn how to configure scan groups, prioritize scan configurations, and deploy patches automatically without manual intervention.
“We want to see what we can automate like maybe our dev machines and then look to see where we can expand the automation to get some of our time back.”Tanium Senior Advanced Consulting Engineer Jason Wasser
- Maintenance windows and deployment strategy: Jason outlines how to tag endpoints, define maintenance windows, and stagger deployments to avoid bandwidth spikes and ensure uptime.
Part 2: Lite Touch and Automate
- Lite Touch patching for more control: For organizations needing selective patching, Jason introduces Lite Touch automation using Tanium Automate to balance flexibility and consistency.
- Repository scan vs. Tanium Scan: Understand the trade-offs between letting endpoints use their own repos and centralizing patch delivery through Tanium infrastructure.
“So, now we're thinking of the hub-spoke—we've got repo servers distributed throughout our infrastructure, throughout the world maybe, that have to be maintained…. But Tanium Scan can actually leverage that architecture to help you reduce or even eliminate those internal repositories that you've been having to manage.”Tanium Senior Advanced Consulting Engineer Jason Wasser
- Compliance reporting and dashboards: Use built-in dashboards to monitor patch compliance, track trends, and share results with leadership.
“So now, as I pivot this dashboard, I can see my patch metrics for all my Linux endpoints and see the effectiveness of our Zero Touch patch automation. And really, what I wanna do is scroll down to this compliance reporting, because this is the outcome of patching, right? What do we want? We want all our patches installed. That’s the outcome we want. We wanna show that too.”Tanium Senior Advanced Consulting Engineer Jason Wasser
- Real-world impact and customer success: From small teams managing a few Linux endpoints to large enterprises, Tanium’s automation saves time, reduces tooling, and improves patch consistency.