Todas las solicitudes
En revisión Core Platform

Per-account container isolation

Joti P. 0 en total

Solicitud

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Vote a favor de esta solicitud Ayude al equipo de producto a saber cuántos clientes lo necesitan.

Conversación

Aún no hay comentarios

Sea el primero en aportar contexto a esta solicitud.