Patching Linux boxes by hand is slow, and one bad upgrade can take a service down with no clean way back. This agent listens on a webhook, runs apt or dnf against the right hosts, and keeps a version snapshot for every change.
sonnet4 daysGitHub WebhooksAnsibleSlackPrometheus
Claude
85ROI
81Scale
$3.9k92Saved
ROI for
README.md
Why this subagent
Patching Linux boxes by hand is slow, and one bad upgrade can take a service down with no clean way back. This agent listens on a webhook, runs apt or dnf against the right hosts, and keeps a version snapshot for every change.
Each run happens inside a maintenance window and ends with a service health check. If the box does not come back clean, it rolls back to the snapshot automatically and posts the result to Slack. You get a per-host report listing what changed and whether it held.
How it runs
Used at step 01 to kick off the pipeline.
Write
Used at step 01 to kick off the pipeline.
WebFetch
Used at step 01 to kick off the pipeline.
WebSearch
Used at step 01 to kick off the pipeline.
Snapshot the current package list and pin versions so a failed run can be reverted cleanly.
pending
Run apt or dnf inside a maintenance window, holding back kernel and security pins flagged as risky.
pending
Health-check the service after the upgrade; on failure, roll back to the snapshot and post the outcome to Slack.
pending
Sample output
json
// Sample output
// (generated when the pipeline finishes)
Given a host group and webhook trigger, plan the smallest safe package upgrade and return a JSON run report with packages changed, health-check result, and rollback status.
Unlock the rest
The full agent definition, install snippet, and starter task are gated for community members.
Members get the full `.md` agent file, the npm / pnpm install one-liners, a starter prompt that we've tuned against real runs, and the open-source repo when this automation ships there. One email, magic link, done.