Ettore Dreucci

[recipe, sysadmin]: How to add the GIT ecosystem to one/all jailkit(s) in ISPConfig

ISPConfig comes with jailkit enabled so that the “clients” that login via ssh are limited to a chroot shell with only some specific command. Every client website has its own jailkit.

Enabling a command in an existing jailkit

If some of your ISPConfig clients need to use the GIT ecosystem you may need to enabled it in the jailkits.

By default the websites jailkits resides in /var/www/clients/clientX/webY so with the jk_cp command you can enable a specific command only in one website jailkit as follow:

jk_cp -j /var/www/clients/clientX/webY/ /usr/bin/git*
jk_cp -j /var/www/clients/clientX/webY/ /bin/uname
jk_cp -j /var/www/clients/clientX/webY/ /usr/share/git-core

Enabling a command in all jailkits

First we need to add an entry for the command in the jailkit init file /etc/jailkit/jk_init.ini:

[git]
comment = Fast Version Control System
executables = /usr/bin/git*, /bin/uname
directories = /usr/share/git-core
includesections = editors

Then in the ISPConfig section System -> Server Config -> Jailkit we need to add the block name we used in the jk_init.ini file.

Now every new jailkit will automatically have GIT enabled.

But I want it enabled in old ones too!

Then you can use this script to update all your jailkits. Copy it in your system path (/usr/local/sbin/), make it executable (chmod +x /usr/local/sbin/jk_updater_isp) and run it!

You can even add a cronjob to keep all your jails updated!