View this package for all CentOS/RHEL versions →

How to install tenantd in CentOS/RHEL 9 (x86_64)

Per-user cgroup v2 isolation + PHP-FPM slice attach for cPanel/AlmaLinux/Rocky/RHEL

License: Proprietary Vendor: GetPageSpeed, Inc. https://github.com/dvershinin/tenantd

Install

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install tenantd

Description

tenantd places each cPanel user under a dedicated cgroup v2 slice with package-driven CPU, memory, PID, and IO limits, and runs a per-user PHP-FPM master inside that slice — so abuse by one tenant cannot starve the rest of the box. Free, closed-source isolation layer that targets stock AlmaLinux 9/10, Rocky 9/10, and RHEL 9 (no vendor kernel, no distro-level reinstall). This package ships the slice tool, systemd units, default and burst profiles, and cPanel Standardized Hooks that auto-attach the slice on account creation and tear it down on removal.

Compatibility

This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

RPMs

Package	Size	Changelog
tenantd-0.5.2-1.el9.x86_64	72 KiB	GetPageSpeed, Inc. (2026-06-17) - Pre-launch hardening sprint (2026-07-01 launch target). · - Stage B finding #23.5 (docs/phase-5-stage-b-live.md L217): tenantctl · mysql-bootstrap no longer emits "GRANT: command not found" on stderr. · Root cause: backtick-quoted SQL example in the unquoted heredoc body · was being run as a shell command. Switched to double quotes. · - Stage B finding kill_cpu calibration (docs/phase-5-stage-b-live.md L230): · phase-3-mysql-smoke.sh KILL-latency assertion bumped 5s → 10s to match · shipping governor default (GOVERNOR_KILL_CPU_THRESHOLD_SECONDS=10.0, · sbin/tenantd-mysql-governor:78). Governor default unchanged. · - Stage B finding ssh-smoke creds (docs/phase-5-stage-b-live.md L111+L215): · phase-3-ssh-smoke.sh self-seeds an ephemeral ed25519 key into root/u1/u2 · authorized_keys (tagged and removed on exit) instead of depending on · rig test-user passwords. Closes the recurring rig-provisioning trap. · - Test infra: new tests/install-smoke.sh fixture-mode harness. Boots a · clean rockylinux:9 container, dnf-installs the four host-eligible · subpackages (excludes whm-plugin, cPanel-only), runs structural checks · (transaction status, scriptlet errors, systemd-analyze verify, banner, · rpm -V, #23.5 stderr regression guard). Would have caught 13 of 17 · Stage B latents automatically.