Page 1 of 2 12 LastLast
Results 1 to 25 of 44
  1. #1
    Join Date
    May 2004
    Location
    World Wide Web
    Posts
    1,195

    CageFS /virtualized file system / Anybody using ?

    http://www.cloudlinux.com/docs/cagefs/index.php

    CageFS is a virtualized file system and a set of tools to contain each user in its own 'cage'. Each customer will have its own fully functional CageFS, with all the system files, tools, etc.
    Anybody using it?
    Any exp./comments?

    Please share.
    RVH Cloud - Every day hosting solutions since 2003
    Shared Hosting Reseller Hosting VPS Dedicated Servers True 24 x 7 x 365 Support

  2. #2
    Join Date
    Apr 2006
    Location
    United Kingdom
    Posts
    618
    We've been using CageFS for a while and it's much more secure. Customers didn't even notice the difference.

  3. #3
    Join Date
    Apr 2008
    Location
    UK
    Posts
    239
    CageFS works very well - seems to have matured now - I'm pretty sure with CageFS in future it could be possible for people to use there down PHP versions/Extensions etc
    SafeSrv.net - Secure Hosting, VPN and Management Services.
    WHMCS FreeRADIUS VPN Module. - Build a fully featured VPN business in no time.

  4. #4
    Join Date
    Apr 2006
    Location
    United Kingdom
    Posts
    618
    Quote Originally Posted by SafeSrv View Post
    I'm pretty sure with CageFS in future it could be possible for people to use there down PHP versions/Extensions etc
    This is already being discussed on the CloudLinux forums, so I'm sure we'll be seeing this in the coming months.

  5. #5
    Join Date
    Apr 2008
    Location
    UK
    Posts
    239
    Thats good to know

    Quote Originally Posted by [JSH]John View Post
    This is already being discussed on the CloudLinux forums, so I'm sure we'll be seeing this in the coming months.
    SafeSrv.net - Secure Hosting, VPN and Management Services.
    WHMCS FreeRADIUS VPN Module. - Build a fully featured VPN business in no time.

  6. #6
    Join Date
    Dec 2010
    Location
    127.0.0.1
    Posts
    5,732
    We use and it both ourselves and customers see a big difference, the only problem I had is where Litespeed was playing up. Well if you went to www.domain.com/cpanel or /whm it would lead to a 500 internal error however that was a small fix in CageFS and we've not had another problem since.

    Really recommend any host uses it with cloudlinux.

  7. #7
    Join Date
    May 2008
    Posts
    74
    We use and it both ourselves and customers see a big difference
    I'm just curious, how do customers see a difference? I was under the impression that CageFS is supposed to work unobtrusively in the background, securing the server without interfering.

    I know that CloudLinux makes a noticeable difference, but does CageFS too?

    Thanks,

    Mark
    Mark Bailey
    WPCDN
    WordPress content delivery network/high-performance web hosting/VPS cloud servers/dedicated servers

  8. #8
    Join Date
    Mar 2006
    Location
    Ventura CA
    Posts
    321
    Still in Beta. Chances are I will grab it when it goes into production:
    http://www.cloudlinux.com/blog/clnew...-32-beta-7.php
    *G.C. SOLUTIONS Elastic Sites Shared Web Hosting* - Hosting Quality Sites Since 2006. Experience Your Website On A Whole New Level
    *Dedicated Resource Usage Experts*

  9. #9
    Join Date
    Jun 2001
    Location
    Princeton
    Posts
    1,029
    Michael -- this was solved in 3.2

    Also, the production version will be officially announced tomorrow (though packages are already uploaded into our channels today).
    Igor Seletskiy
    CEO @ Cloud Linux Inc
    http://www.cloudlinux.com
    CloudLinux -- The OS that can make your Shared Hosting stable

  10. #10
    Join Date
    Mar 2006
    Location
    Ventura CA
    Posts
    321
    Igor when do you think the Dual PHP will be coming down the pike?
    *G.C. SOLUTIONS Elastic Sites Shared Web Hosting* - Hosting Quality Sites Since 2006. Experience Your Website On A Whole New Level
    *Dedicated Resource Usage Experts*

  11. #11
    Join Date
    Jun 2001
    Location
    Princeton
    Posts
    1,029
    Mid July for cPanel (beta) with other control panels following fast. The main delay is plugin for the control panels.
    Igor Seletskiy
    CEO @ Cloud Linux Inc
    http://www.cloudlinux.com
    CloudLinux -- The OS that can make your Shared Hosting stable

  12. #12
    Join Date
    Mar 2006
    Location
    Ventura CA
    Posts
    321
    That is awesome news!!!

    Thanks
    *G.C. SOLUTIONS Elastic Sites Shared Web Hosting* - Hosting Quality Sites Since 2006. Experience Your Website On A Whole New Level
    *Dedicated Resource Usage Experts*

  13. #13
    Join Date
    May 2004
    Location
    World Wide Web
    Posts
    1,195
    Quote Originally Posted by tumble View Post
    Igor when do you think the Dual PHP will be coming down the pike?
    Yep, I am also waiting for the same
    RVH Cloud - Every day hosting solutions since 2003
    Shared Hosting Reseller Hosting VPS Dedicated Servers True 24 x 7 x 365 Support

  14. #14
    I'm currently testing this on a server and so far having problems with a customer trying to use Image magick. The convert binary doesnt seem to be working for him since we installed CageFS.

    Also zend optimizer isnt working either. Pages come up with "Zend optimizer not installed".

    Using PHP 5.2.17. Zend Optimizer v3.3.9

    Anyone else experienced any problems with those?
    Last edited by Draytoc; 06-01-2012 at 06:46 AM. Reason: sp

  15. #15
    Join Date
    Jun 2001
    Location
    Princeton
    Posts
    1,029
    ImageMagick -- most likely it was installed from source in some custom directory. You would need to add it:http://www.cloudlinux.com/docs/cagef...s_template.php

    Zend -- probably something similar

    Please, contact our support at helpdesk.cloudlinux.com (it is free), and they will help you set it up.
    Igor Seletskiy
    CEO @ Cloud Linux Inc
    http://www.cloudlinux.com
    CloudLinux -- The OS that can make your Shared Hosting stable

  16. #16
    Quote Originally Posted by iseletsk View Post
    ImageMagick -- most likely it was installed from source in some custom directory. You would need to add it:http://www.cloudlinux.com/docs/cagef...s_template.php

    Zend -- probably something similar

    Please, contact our support at helpdesk.cloudlinux.com (it is free), and they will help you set it up.
    Thanks for your reply.

    I've checked the imagemagick.cfg file and the paths are correct. It's a cpanel server.

    /usr/share/cagefs-skeleton/usr/bin/convert looks fine.

    The customer with the Zend problem is using Joomla with some sort of Zend module. Zend was compiled with EasyApache.

    I'll drop by your support helpdesk at some point later today.

  17. #17
    Join Date
    Oct 2003
    Location
    UK
    Posts
    3,590
    Were about to put this in to production tonight,

    when we run /usr/sbin/cagefsctl --enable-all would we expect to have any problem? ie when others ran this to enable it for all customers, did you get any tickets/problems or anything that would no longer work?
    The Hosting Heroes Ltd - over 20 years in the UK hosting industry.
    Website Hosting | Reseller Hosting | Cloud VPS Servers | Dedicated Servers | VPS Reseller for WHMCS
    www.thehostingheroes.com

  18. #18
    Join Date
    May 2004
    Location
    World Wide Web
    Posts
    1,195
    Have been using CageFS on several servers (CentOS 5.8x & 6.x2 / 64 Bit) and this have not caused any problems.

    Not a single ticket have been recd. so far
    RVH Cloud - Every day hosting solutions since 2003
    Shared Hosting Reseller Hosting VPS Dedicated Servers True 24 x 7 x 365 Support

  19. #19
    Join Date
    Oct 2003
    Location
    UK
    Posts
    3,590
    HI

    anyone had these 2 issues:

    a) /usr/share/cagefs-skeleton/var/spool/mqueue/.spamassassin/ grows over 20GB ?

    b) updating cageFS on yum crashes OS during install?? we had to reboot then centos 6.2 (cloudLinux) crashed on bootup and required FSCheck.
    The Hosting Heroes Ltd - over 20 years in the UK hosting industry.
    Website Hosting | Reseller Hosting | Cloud VPS Servers | Dedicated Servers | VPS Reseller for WHMCS
    www.thehostingheroes.com

  20. #20
    Join Date
    Jun 2001
    Location
    Princeton
    Posts
    1,029
    Hi Chris,

    Did you resolve those issues? No one else reported anything like that - so I want to be sure it is resolved on your servers.
    Igor Seletskiy
    CEO @ Cloud Linux Inc
    http://www.cloudlinux.com
    CloudLinux -- The OS that can make your Shared Hosting stable

  21. #21
    Join Date
    Nov 2005
    Posts
    3,944
    Is this just an advanced jail? Why is CageFS better than any other jail out there?

  22. #22
    Join Date
    Jun 2001
    Location
    Princeton
    Posts
    1,029
    Yes, it is basically a jail.

    The main differences are:
    1. We provide "virtualized" /etc, where everything is present, but the info about other users.
    2. We remove all the SUID software from the jail, yet users still can do passwd, sendmail and other suid based, allowed scripts (via proxy exec).
    3. It is inside namespace, not just chroot
    4. We virtualize /proc filesystem (one user cannot see processes of other users)
    5. It works for web, not just shell/cron

    It has all the tools around it to add/remove users, applications, handle updates, etc...

    The goal is to prevent privilege escalation as well as information disclosure attacks.
    Igor Seletskiy
    CEO @ Cloud Linux Inc
    http://www.cloudlinux.com
    CloudLinux -- The OS that can make your Shared Hosting stable

  23. #23
    Join Date
    Oct 2003
    Location
    UK
    Posts
    3,590
    Quote Originally Posted by iseletsk View Post
    Hi Chris,

    Did you resolve those issues? No one else reported anything like that - so I want to be sure it is resolved on your servers.
    issue a) we just set a task to delete the files every hour.
    issue b) Yes we got it back online, it didnt happen on any of the others so i think it was a server issue that just happened at the wrong time.

    Quote Originally Posted by iseletsk View Post

    The goal is to prevent privilege escalation as well as information disclosure attacks.
    this is the main reason we installed cageFS :-)
    The Hosting Heroes Ltd - over 20 years in the UK hosting industry.
    Website Hosting | Reseller Hosting | Cloud VPS Servers | Dedicated Servers | VPS Reseller for WHMCS
    www.thehostingheroes.com

  24. #24
    Are there any performance issues with CageFS?

    Let's say you're running a server with 500 cPanel accounts.
    Can installing CageFS break anything or cause a server to slow down?

  25. #25
    Join Date
    Oct 2003
    Location
    UK
    Posts
    3,590
    I doubt it will slow it down, we've not noticed any speed reductions, with the better security it brings it'll likely improve things if anything.
    The Hosting Heroes Ltd - over 20 years in the UK hosting industry.
    Website Hosting | Reseller Hosting | Cloud VPS Servers | Dedicated Servers | VPS Reseller for WHMCS
    www.thehostingheroes.com

Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 9
    Last Post: 10-24-2011, 04:01 PM
  2. System Integrity checking detected a modified system file
    By jackpx in forum Hosting Security and Technology
    Replies: 4
    Last Post: 02-26-2011, 06:10 AM
  3. System Integrity checking detected a modified system file?what to check??
    By anastasia0181 in forum Hosting Security and Technology
    Replies: 1
    Last Post: 01-02-2010, 04:16 PM
  4. Is this a system file?
    By Hosemeyer in forum Web Hosting Lounge
    Replies: 9
    Last Post: 07-21-2004, 12:08 AM
  5. Upload file using pur ASP and file system object
    By bigmonster51 in forum Programming Discussion
    Replies: 0
    Last Post: 01-22-2004, 09:40 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •