Quote:Debian has LTS releases every two years - https://en.wikipedia.org/wiki/Debian_ve ... ease_table - with LTS support for 5 years.
Debian10 was released in summer 2019.
So, if you installed Debian10 last year - you don't need to do dist-upgrade until 2024-2025... it will be covered with security fixes.
That's why I choosed Debian.
You are in total peace for 5 years per installed server.

Imperio of VestaCP Wrote:the project is not abondoned, but team is very busy in last time. Now we are rewriting the front-end interface of the panel. Front-end of FM already done. Also we are working under support of CentOS 8 & Debian 10

(07-10-2020, 07:42 PM)deanhills Wrote: This discussion follows on from @xdude's thread about VestaCP whether it's a good Web Panel to use.

I've just learned tonight from @Sohamb03 that VestaCP is no longer actively supported by the developers.  I then went to the VestaCP Discussion Forum to check this out and looks like the last time there have been any updates to VestaCP has been as far back as September 2019.  That means that the original VestaCP project has become a security risk.

However, what I also learned from sohamb is that there is a Belgian fork that works with CentOS 7:
https://github.com/madeITBelgium/vesta

BUT - then when I did my research at the VestaCP Forum, I discovered this detailed discussion there and another fork that is actively developed for Debian 10:
https://github.com/myvesta/vesta#myvesta-control-panel

The above VestaCP Debian Fork now has my attention - particularly because of what the author of the fork says his reason is for using Debian 10:

He was comparing this with Ubuntu that is always a headache when it has to go through an upgrade.  Obviously the more up to date the configuration that is used with VestaCP the less risky it will be to use.

I'll probably try Sohamb's CentOS fork first.  As I'm a CentOS user.  But then again, maybe this is an opportunity to change to Debian.  Also, the guy responsible for developing the Debian Fork has just started a discussion forum, so may be worthwhile trying it out.  There may be some active support available.

In the discussion at VestaCP about whether the VestaCP Project is dead, one of the Administrators recommended the following alternative for VestaCP that may also be worthwhile pursuing - looks like it's a Project of some of the original VestaCP staff - it has a dark theme and looks very much like VestaCP otherwise:

https://www.hestiacp.com/

I've just checked up on the regular Admin at VestaCP that used to take the lead.  Skurudo and Imperio.  Skurudo seems to have disappeared towards end of 2019.  Imperio's last English posts were participation in the thread below in which hestiacp is mentioned.  Looked like hestiacp may have been started by VestaCP staff:
https://forum.vestacp.com/viewtopic.php?f=10&t=19531

Any way, VestaCP has always been risky, but probably now more than ever before.  It hasn't been updated since September 2019.  However, Imperio - a lead Admin of the original VestaCP (maybe the owner?) says it's still a going concern - or maybe is is just dreaming about making changes that he doesn't have time  nor staff left to complete:

Imperio is still supporting the Forum but all of his posts since January have been written in Russian.  His last support related post was made a week ago.

(07-11-2020, 03:55 AM)sohamb03 Wrote: Actually yeah it's very sad that the VestaCP project is slowly moving to it's last days. It's only the forks that'll be maintained, cuz the owner Serghey-rodin seems no longer interested in the project. He's ignoring the calls of his close friends and developers. He was last seen in September, yeah the time the latest build of Vesta was released and is gone since. Read more about it here - https://github.com/serghey-rodin/vesta/issues/2006

(07-11-2020, 03:55 AM)sohamb03 Wrote: Also, if you go ahead and read this https://github.com/serghey-rodin/vesta/issues/2006#issuecomment-650321268 you'll discover that the apt and rpm build files are exclusive to the owner, he didn't share it with anyone and that's what is keeping the Devs from creating an unofficial release.

Lupul and Rapel presently are into the Hestia project, dpeca is the maintainer of MyVesta, and MadeIT takes care of the Vesta fork for CentOS. Also, it's mainly dpeca who still updates the main repo.

dpeca Wrote:To be honest, reason for myVesta is to have total control of code and builds because I don't want to wake up one morning and realize that 120 servers of my company is down because something went wrong during auto-update of hosting panel.
I know how my servers are configured, and I'm careful with commits.

When someone other is pushing new releases... well... everything can be expected... at least because he don't know if I'm using something specific on my servers.

So, it's subjective reason - specific to me and my company.

(07-11-2020, 03:55 AM)sohamb03 Wrote: Slowly, the main project will fall apart. If you see the GitHub, >300 issues and ~66 PRs isn't a joke. The Devs have continuously complained that the issues and PRs are ignored and it's Serghey that everyone is waiting for, in the hope that helps run the build for Vesta patched with bug fixes and security patches.

(07-11-2020, 03:55 AM)sohamb03 Wrote: I'm into CentOS too, and I must say that this fork of Vesta for CentOS has all the bug fixes and security patches we'd need. I just ditched CyberPanel from my VPS for a variety of reasons. I'm gonna stay at Vesta for now, all the more I've a paid license for the Vesta file manager.

(07-11-2020, 03:55 AM)sohamb03 Wrote: One last word on the types of OS - just a personal opinion nothing else. I've talked to a variety of people, regarding OS, and what each one said is that Ubuntu is the worst one, CentOS is okay as it's lightweight but the repos are quite old so you gotta build everything from source (a reason why I don't recommend it to beginners), and Debian is the best cuz it's much more updated and packed with latest version of applications, besides quite light if not as much as CentOS.

arafatx Wrote:I love VestaCP because it has the lowest system requirement amongs other web control panels. You can install it on a server less than 1GB RAM. The UI was fast and I really like it. I remember last time, I bought a complete set of addons feature just to support devs even that time I knew that VestaCP was not ready for production because of many security flaws. So I gave my trust and time to devs but I was surprised they couldn't make it on time until people started to talk deep about security in VestaCP and that issue went viral over the internet.

That time I even felt sad, when he said that he is not gonna rewrite codes for basic security practice because of thousand line of codes. That was the time when I felt VestaCP is dead. As a server administrator I still want VestaCP because of the system requirement, the UI and I do like the marketing team in VestaCP. He should have gave his project to somebody else and let others to rewrite the codes. Now even this project is alive, the bad reputation from the past has damaging the brand name. If security in VestaCP has improved a lot, they should rebrand and I believe many customers from DA and Cpanel will not hesitate to move into "Brand New Vesta CP"

(07-11-2020, 07:15 AM)deanhills Wrote: Thank you for contributing to the discussion and providing the links below @sohamb03.  The one below referring to Serghey Rodin is particularly informative:

Correct.  I picked up on that too at the VestaCP Forum discussion.  Also that it was dpeca who was maintaining the updates at the original VestaCP up to September.  His main objective for moving outside was because he was worried about the security of the project because he has instances installed on 120 different servers.  He probably wanted greater control.  And maybe that's a good sign for users of the Debian fork.  He has a vested interest in keeping the fork alive.

I saw the issues too, but then when discussions stopped on those issues I thought they had been solved.  I guess with the forks there were no longer a need for the discussions.  Also, I picked up in the VestaCp Forum that some of the discussions have been deleted at VestaCP Forum.  These must have been the discussions referred to, and also resulting in conflicts with the VestaCP Forum staff, the development of forks and creation of HestiaCP.

Thank you for this valuable feedback.  I picked up in the VestaForum discussions that that is the reason for other users to stick with VestaCP too because of their subscription with the File Manager.  It seems to be working very well.  If I may ask, what extra features does one get with the File Manager?  Can one edit codes, zip and unzip folders?  Like with cPanel File Manager?

Sadly, that is true about the VestaCP Ubuntu saga and also possibly the reason for losing interest as well, as many of the users were waiting for an Ubuntu version of the original VestaCP that got promised to them all of the time, and never materialized in the end.  Nice to hear your explanation about why it hasn't been working so far, and possibly never will unless someone has lots and lots of time and complete access to the core of the original project to make a version that works with Ubuntu.  Dpeca had a good point however about focusing only on one configuration as it's too much of a problem for security codes to maintain more than one configuration at a time.  He probably knew well as he was the last one to work on the security updates for the original VestaCP.

In one of the discussions that you linked to your response, I found these words that echo my main reason for sticking with VestaCP, which is Nginx and it being a super light panel.  He said it very eloquently:


@ikk157 Thank you for your suggestion about CyberPanel.  I don't think I'm in total agreement that VestaCP forks are going to die soon.  Problem is VestaCP is really popular as a free cPanel alternative.  Particularly with how light it is with Nginx.  It's only lacking feature has been security coding and looks as though these are getting updated in the forks, and also with the new HestiaCP that some of the original VestaCP staff who left VestaCP are in process of developing.  Although when I studied all of the discussions looks like HestiaCP no longer is connected with the core of the original VestaCP and has become a panel with its own ID.  May be interesting to see how well it works.  For now I'm checking their discussion Forum first to see what the support requests are and the feedback is like.