As Linux infrastructures grow, security vulnerabilities, maintenance windows, and compliance requirements need to remain manageable – without putting production operations at risk.
orcharhino is Patch Management software that helps IT teams and infrastructure managers keep heterogeneous Linux environments under control.
Linux Patch Management refers to the controlled process of deploying, testing, approving, and installing security updates, bug fixes and other software updates on Linux systems. In complex IT environments, professional Patch Management also includes centralised management of repositories, package versions, maintenance windows and patch status.
More systems
less transparency
increasing complexity
greater urgency to act
Patch management therefore means far more than simply installing updates these days. It is about managing the entire lifecycle of software packages in a controlled manner.
orcharhino provides end-to-end management of the patching process: repository content is centrally managed, versioned, tested, approved, and rolled out in a controlled manner. Patch status, errata, and CVEs remain centrally documented and traceable throughout the process.
Package contents are sourced and managed centrally from external repositories.
The connected systems access content that has been made available in a controlled manner, rather than accessing external sources directly.
Defined repository states are stored as versions.
This makes it possible to reproduce and track identical software states.
Updates are validated in test and staging environments before being deployed in production.
This enables errors and incompatibilities to be identified at an early stage.
New package statuses are specifically approved for defined systems.
Transparent approval processes ensure transparency and control.
Patches are rolled out automatically at specified times and within defined maintenance windows.
This reduces the amount of manual work required during day-to-day operations.
Patch statuses, errata and CVEs are recorded and analysed centrally.
This keeps software states traceable for audits, compliance requirements, and further actions.
This is what sets orcharhino apart from traditional patching solutions: it automates not only update installation, but the entire software package lifecycle in a controlled and reproducible way.
Manage versioned patch, package, and repository states
strengthen transparency & compliance
Learn in a personalized demo how to centrally manage repositories, software states, testing, approvals, and rollouts.
orcharhino combines Patch Management with other infrastructure management functions. The solution integrates repository and software version management with Provisioning Management, Configuration Management, Release Management, and Lifecycle Management. This enables systems, configurations, and updates to be managed centrally through end-to-end processes.
Aspect | Typical focus of traditional Patch Management solutions | orcharhino |
|---|---|---|
Process scope | Execution of individual steps in the patching process | manages the entire patching process |
Repository control | Use of available repository and package states | versions and controls repository states |
Software states | Execution of patch jobs | provides reproducible software states |
Packages and approvals | Execution and control of updates | enables centralized control over packages, versions, and approvals |
Linux distributions | Distribution-specific patching processes | standardizes processes across numerous Linux distributions |
Process scope
Repository control
Software states
Packages and approvals
Linux distributions
With orcharhino, numerous Linux distributions can be centrally managed and patched, including Red Hat Enterprise Linux, Ubuntu, Debian, SUSE Linux Enterprise Server, AlmaLinux, Rocky Linux, Oracle Linux, Amazon Linux, and CentOS Stream.
The patching processes can be managed consistently across physical servers, virtual machines, and cloud environments.
With orcharhino, numerous Linux distributions can be centrally managed and patched.
The patching processes can be managed consistently across physical servers, virtual machines, and cloud environments.
Learn more about the individual Linux distributions, their specific characteristics, and how they can be integrated and managed with orcharhino.
Supported architectures: x86_64/AMD64 and, depending on distribution and Version, ARM64 and PPC.
A complete overview of supported distributions, versions, and architectures can be found in the datasheet.
If orcharhino meets your requirements, we guide you through a structured implementation in your environment.
In the architecture workshop, we define requirements and target architecture.
We install orcharhino and configure it to match your environment.
We integrate existing systems with orcharhino step by step.
We move orcharhino into production in a controlled manner.
Companies across a range of industries use orcharhino to coordinate patch rollouts, manage repository states in a traceable manner, and reduce manual effort in day-to-day operations. Selected customer testimonials show how this approach delivers value in real-world environments.
> 60 %
less time spent on patching
on average across our customer projects
Based on our customer projects to date, the time spent on patching processes is reduced by more than 60% on average. Automation contributes to this
across the entire workflow – from repository management and versioning to testing,
approval, rollout, and documentation. The actual savings depend on the existing environment, system landscape, and level of automation.
Further information on supported releases can be found in the orcharhino datasheet.
Yes. Systems do not need to have been newly installed or provisioned with orcharhino.
The respective Content View version can then be promoted in a controlled manner through lifecycle environments such as development, testing, and production. This ensures that production systems only gain access to a new software state once it has been tested and approved.
Yes. Managed Linux systems do not require direct access to public networks, as they can obtain packages and updates through the orcharhino server or an orcharhino proxy.
Isolated environments are also supported. For example, content can be synchronized via an upstream orcharhino server, provided that an appropriate network connection exists within the organization.
In a fully air-gapped environment, content can be exported on a connected server, physically transferred, and then imported on the isolated server. The appropriate architecture depends on the respective network and security zones.
orcharhino can be managed through its browser-based management interface, the Hammer CLI, and a REST API. This makes it possible to automate recurring tasks and integrate existing IT systems and portals.
Schedule a personalized demo and discover how to centrally manage patching processes, close security vulnerabilities faster, and provide reproducible software states.
Patch Management is part of orcharhino’s comprehensive infrastructure management approach. Explore additional core capabilities for centrally managing and automating your IT infrastructure.
Manage configurations centrally and keep them consistent
Identify vulnerabilities and monitor security status centrally
