The Computer Officers install all security patches on the managed workstations.
Ubuntu image
All the workstations now install patches automatically. The workstations report their update status to Hobbit.
Kernel patches
The machines will report to hobbit under 'kernel' when there are has been a kernel patch and they need a reboot.
If the hobbit dot is red that means 'needs a reboot and you can do it now' and yellow means 'needs a reboot but users are logged in'. So it should be safe to reboot any with red kernel dots.