I know how to set up a LAMP stack on Ubuntu pretty well for a single website / single user, but I'd like to allow multiple users to host multiple sites on a single server.
This is for different departments in an organization, so I don't think anyone using the server would be malicious, but I would like to try to separate out access anyway.
I like how most CPanel is set up so that:
- Users can't see each other's files
- Apache / PHP runs as the user and not
- Scripts can't access things outside of the home directory (except for maybe
- Users can connect via FTP but are limited to their home directories
- Users can access the box via jailshell
I dont actually need a control panel like CPanel, I just want the behaviors / features mentioned above.
In doing research on how to accomplish those things I've found:
- Set file permissions correctly and also ftp access only (or maybe jailshell)?
- Something like
vsftpseems like the standard / most common thing for this
- I see that there is
jailkitfor Ubuntu - not sure how common it is.
I've been reading up on
Apache suEXEC - but:
- I am unclear about which one might work best with Ubuntu
- I can't tell which ones might be most commonly used
I have also seen some discussion on
PHP-FPM which I'm not sure are right for any of the requested features - I know they help with memory management for PHP.
- Can those two tools be used to have a script "execute as the owner" ?
- Are they commonly used with Ubuntu?
- Are they stable enough to run with a production server? (I've seen some complaints especially regarding
Ideally I'd like to go with the the ones which are most commonly used.