From 17b607dacf2011f3f278ad54f42d78ae73c13c7c Mon Sep 17 00:00:00 2001 From: Stefan Pejcic Date: Thu, 25 Apr 2024 00:35:43 +0200 Subject: [PATCH] Update 0.1.7.md --- documentation/docs/changelog/0.1.7.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/documentation/docs/changelog/0.1.7.md b/documentation/docs/changelog/0.1.7.md index 45481086..4aa6ac52 100644 --- a/documentation/docs/changelog/0.1.7.md +++ b/documentation/docs/changelog/0.1.7.md @@ -9,6 +9,7 @@ Not yet released. ### 🚀 New features - [Cronjobs can now be enabled/disabled and run on demand](#cron-disable) +- [System Contianers that allow OpenPanel users to run Docker and K8S](#system-containers) - [Admin users can now be edited: rename, change password, suspend/unsuspend from OpenAdmin interface](#edit-admin-users) - [OpenAdmin search for users, websites and options](#admin-search) - [Forbidden usernames list](#forbidden-username) @@ -168,3 +169,27 @@ This ensures that only the services that are actually used are running. With these changes, **we managed to lower the memory usage of new user accounts from 680MB to only 10MB**. ----- + + +### System Containers + +Administrators now have the option to enable root access for OpenPanel users within their containers. This feature, initially disabled due to security concerns, has been re-enabled following recent enhancements to the stack, ensuring secure execution of root users within the containers. + +OpenPanel users can now securely operate Docker or Kubernetes within their OpenPanel accounts, enabling nested virtualization. + + +Scheme: +```bash +OpenAdmin +└── OpenPanel + ├── User #1 + │ ├── Docker #1 + │ ├── Docker #2 + │ └── Docker #3 + ├── User #2 + │ ├── Docker #1 + │ └── Docker #2 + └── User #3 + └── K8S + +```