Skip to main content
Free · Closed-source · Stock kernel

Free CageFS-equivalent isolation on stock AlmaLinux. No forked kernel.

tenantd is a cPanel-first multi-tenancy isolation layer for stock AlmaLinux, Rocky, and RHEL 9 (10 in prep). It gives you the per-tenant CPU, memory, process, filesystem, shell, cron, and MySQL isolation you would reach for CloudLinux to get - on the in-tree kernel you already run, for free.

Install tenantd tenantd vs CloudLinux →

Why not just keep paying CloudLinux?

CloudLinux ships a forked kernel with the LVE module patched in, and charges $7 to $18 per server per month for it. That forked kernel is why your dnf upgrade story differs from every other RHEL-rebuild host you operate, and why you wait on their cadence for kernel CVEs. tenantd refuses to fork the kernel, and it does not charge you a license fee. That is the whole point.

Everything, free

There are no paid tiers and no license keys. Every server, every tenant, every feature, $0:

  • Per-tenant cgroup v2 slice (CPU, memory, task-count caps)
  • PHP-FPM per-tenant masters with entry-process caps
  • Mount-namespace filesystem isolation (CageFS-equivalent)
  • SSH and cron attach into the tenant namespace
  • Multi-PHP
  • The MySQL governor: per-tenant query/connection caps + KILL on runaways
  • Dedicated per-tenant mariadb@ instances for real per-tenant block-IO enforcement
  • eBPF per-tenant IO observability and the ProxySQL front door
  • Fleet dashboard across all your hosts
  • 24h per-tenant stats and the WHM plugin

How it stays alive: optional paid support

tenantd is built and maintained by GetPageSpeed. The software is free; if you run it at scale and want a throat to choke, we sell optional support and SLA contracts and hands-on CloudLinux migration help. No support contract is ever required to use any feature.

It is closed-source and free. Free as in price, maintained by a real company, not abandonware.

Install

dnf install https://extras.getpagespeed.com/release-latest.rpm
dnf install tenantd

Already on CloudLinux? tenantctl-migrate apply reads your existing LVE caps and CageFS skeletons, enrolls every caged user, swaps the FPM master, and unmounts CageFS - target under 2 minutes on a ~100-user host, with --rollback if anything looks wrong. Then cancel your CloudLinux license.

Read before you switch

We wrote the comparison page ourselves and we name our own gaps in it. The moment a customer feels misled, the support load triples - so we would rather you self-select correctly up front.