Description

The Docker for cPanel Plugin brings you Docker and Docker Compose, an extensible app build and ship tool, and unleaches its full potential on cPanel WHM. The plugin automatically installs Docker and Docker Compose, integrates it with your cPanel & WHM server, and secures it so your end users can run their apps without needing privileged or root access nor your day to day support. Resources used by Docker apps are ultimately accountable to the users and are therefore compatible with CloudLinux.

Technology

The Docker for cPanel Plugin leverages Docker Compose - a tool for defining and running multi-container Docker apps. With Docker Compose, you define your app(s) and service in a portable YAML file and then start all services with a single command. The Docker for cPanel Plugin leverages Docker Compose to tie your services or apps together, launch them, and maintain their uptime.

Because the Docker daemon requires privileged access to the host system, care must be taken to prevent priviledge escalation from within containers. We achieve this by running containers in their non-priviledged user-bound namespaces (a Linux kernel feature). Namespacing also has the advantage of binding processes and their resource usage back to the cPanel user, which is needed for proper accounting.