Is Jail needed for user ssh ?

AxlF

Verified User
Joined
Dec 14, 2007
Messages
86
Hello,

i have a question:

is Jail needed for allowing users ssh into the server?

If yes - I installed it via custombuild, but I cannot access as user.

Code:
/usr/local/directadmin/custombuild# ./jail/jail_user.sh username
cp: cannot stat `/usr/local/directadmin/custombuild/jail/su': No such file or directory
cp: cannot create regular file `/home/username/lib/x86_64-linux-gnu/libc.so.6': No such file or directory
usermod: no changes

And on login

Code:
-/bin/bash: error while loading shared libraries: libtinfo.so.5: cannot open shared object file: No such file or directory

Any tips?
 
Jail feature is still is alpha stage and it will never be stable because of the problem like you posted. It needs to have specific libraries under each user's homedir. I would recommend you switching to CloudLinux (CentOS kernel) + their CageFS product. This way you'd be secure with providing shell to your clients.
 
Thank you for your reply.

I thought it would be more stable, since the last update to this article in the knowledge base is 2009.

You have experience with cloudlinux? Does it work well? Any known issues?

Regards,
AxlF
 
A few of my clients would like to get ssh access, e.g. For deploying websites through ssh... I would like to research available options ....
 
You will run into nothing but problems with allowing anyone ssh access.
 
that's why I would like to jail the users into their home directories...
 
You have experience with cloudlinux? Does it work well? Any known issues?

Yes, it is tightly integrated with DirectAdmin and works very well with it. There is a known issue with CustomBuild 2.0+suPHP+Apache Event MPM (not default options), however, they promised to fix that on Monday :) No other known problems.
 
I'm really considering cloudlinux.

What Apache / PHP options do you prefer?

My only requirement would be that I can run PHP 5.4 and PHP 5.5 as selectable options...
 
CloudLinux offers you their own PHP selector, so you can choose anything between PHP 4.4 and PHP 5.6 :) I'd go with FastCGI on CloudLinux servers for now. However, stay tuned for news on their blog about PHP SAPIs (mode) :)
 
Another question:
I run a debian machine. Am I able to install cloudlinux just by using custombuild?

Or do I need to setup a fresh server with CentOS?
 
CloudLinux offers you their own PHP selector, so you can choose anything between PHP 4.4 and PHP 5.6 :) I'd go with FastCGI on CloudLinux servers for now. However, stay tuned for news on their blog about PHP SAPIs (mode) :)
Martynas, we don't need multiple PHP versions. Any known issues with Cloud Linux and mod_ruid2?

Thanks.

Jeff
 
No, it works perfectly fine with mod_ruid2, however, it cannot limit RAM and put PHP in CageFS with mod_ruid. More information: http://docs.cloudlinux.com/index.html?compatiblity.htm. However, I'll probably implement a new special-for-cloudlinux PHP mode in CB 2.0 :) Which would have no limitations and would be very flexible. It would depend on CloudLinux libraries, so it couldn't be used without it.
 
Back
Top