Ruby and NodeJS

[apinto]

Greetings,
I know and understand that, as of today, Sentora was made to host PHP.

However...

Will be any issues if I install Ruby and NPM alongside with Sentora?

[Me.B]

Node.js is not made for shared hosting. Even later I don't think we could add it to the stack.

The main issue is security, if you plan to use it on dev machine that you will be the only one using it (firewall it) then no issue BUT in production very bad, any user would be able to access all users files.

M B

[apinto]

What about Ruby?
Same issues?

[jacobg830]

Yes. Ruby and applications written in languages other than PHP do not follow open_basedir and so can access all other user files.

[Me.B]

ruby, perl, node.js, mono will rely on CGI gateway and without any internal security model like in PHP, they will be able easily to access all folders that apache user can access.

Php on the other side as long you use suhosin it will lock it down to it's own directory.

M B

[apinto]

I understand that.
Do you know of any way to make it more safe?

I was researching and found this: https://www.phusionpassenger.com/#about
Is this possible to integrate (via a module) with Sentora?

[Me.B]

Hmm checking:

https://www.phusionpassenger.com/documen...rSwitching

Must test if it really offer jail like suhosing might be intersting. But we are going toward using FastCGI that would solve a lot of such issues.

Need more testing.

M B

[apinto]

Great you liked it.
I will test it on my VM.
When I have some feedback I'll post here.

Thank you!

[Me.B]

My issue is more about users jailing. Require more in depth testing and not quite sure ruby will lock down users that way.