Spacewalk is a decent open source project for patch management but there is no native support for running it in a container.  I’m a fan of Spacewalk and use