Tüm Talepler
İnceleniyor Çekirdek Sistem

Per-account container isolation

Joti P. 0 yorum

Talep

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Bu Talebi Destekle Kaç müşterinin buna ihtiyaç duyduğunu ürün ekibine gösterin.

Tartışma

Henüz Yorum Yok

Bu talebe ilk katkıyı siz yapın.