Consider that there are 100 windows virtual machines coming from a single base image and each vm is added to domain along with minor other machine specific settings which can be done by a script.

After a week say I want to update all vms with a security patch. There are two methods to do this:

  1. Destroy all vms, update base image, create all vms again.

    Issue: This requires all the vms to be destroyed, create disk again, define vm, then run required scripts which take care of vm specific configuration with multiple reboot cycles as required.

  2. Manually update all vms and apply the security patch.

    Issue: Just cannot scale. May be okay for a set of 5-10 vms not 100s.

I am curious how do other people/softwares do it? Is there a better approach or can I improve my 1st method?


You can improve on option 1 by AD integrating the windows machines and having changes pushed out through the tools it provides e.g. SCCM

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.