Changelog (Edge)

The Edge channel ships new features early. It also includes every fix from the

current LTS release (1.30.9 – see the LTS changelog). New in 2.0.3:

Features

CWP Cage (resource limits)

• CloudLinux-style per-account resource limits. Each hosting account can be given CPU (%), memory, process and I/O limits, enforced with Linux cgroups, and the account's PHP runs isolated through the CWP lsPHP handler (cwpsapi). Limits can be set per package (every account on the package inherits them) or overridden per account, and legacy cgroups settings are imported automatically. The Cage live view shows real per-account CPU/memory usage, busiest accounts first. (CWPpro)

lsPHP per domain (PHP Selector)

• When an account is enabled for lsPHP, its PHP Selector now offers an "lsPHP" option next to Default / Selector CGI / Selector FPM, so a single domain can be switched to the high-performance lsPHP handler on a chosen PHP version. The option appears only on CWPpro servers with the handler installed and the account enabled for it; every other account looks and works exactly as before.

Fixes

Migration (external panels)

• The DNS import no longer corrupts records: a record's type is no longer glued onto its value (A/CNAME/MX records imported cleanly), and long quoted TXT records (SPF, BIMI) are no longer truncated at the first semicolon. In addition, A/AAAA records that point at the old server's IP are now repointed to the new server — including wildcard and subdomain records — so mail and web for every subdomain land on the new server after a migration instead of the decommissioned one.

Cloudflare (user panel)

• Input hardening on the module entry point.

Plus all fixes from LTS 1.30.9.

Includes every fix from LTS 1.30.7. Edge-specific in 2.0.2:

Features

CWP Cage

• Bulk operations and a live per-account resource view in the Cage module.

Tools

• install_wp_cli: one-command WP-CLI install, downloaded from the CDN and checksum-verified.
• Ebury cleanup tool (/scripts/cwp_ebury_clean) plus a Security Audit check that detect and quarantine a tampered libkeyutils (the Ebury SSH credential-stealer) using a static busybox, so the check works even on a compromised host.

Fixes

Security & updates

• Panel update/version checks and the MySQL upgrade helper now fetch over HTTPS instead of plain HTTP (closes an on-path tampering surface on root-run downloads).
• CWP Secure Kernel: UEFI boot-entry handling made consistent and the trial-boot/bootcheck rollback no longer stalls.

Mail / PHP

• PHP mail() logging: when enabled, PHP-FPM writes the per-account log under /home/<user>/logs so it works on EL8/EL9 (and hardened EL7) where /usr is read-only.
• Webmail opens on webmail.<domain> with a matching certificate.

Backups / databases

• Legacy backup now includes and restores each account's MongoDB databases.
• CWP-to-CWP "Sync again" no longer leaves 403 errors or duplicated mail.
• User-panel: deleting a database user no longer logs a MySQL grant-table error.

File Manager

• Decompressing a .gz file works on EL7 again.

ModSecurity

• Enabling ModSecurity on AlmaLinux/EL10 works (reuses the existing module instead of recompiling).

Plus the rest of the LTS 1.30.7 fixes.

The 2.0 line introduces the CWP Edge channel, where new features ship first (the

stable LTS channel keeps getting fixes on the 1.30.x line). Edge builds are numbered

2.0.x and are opt-in; new installations always start on LTS.

Highlights of the first Edge builds

Features

CWP Cage

• First release of CWP Cage: CloudLinux-style per-account isolation and the groundwork for resource limits, built on the CWP lsPHP handler (cwpsapi) and Linux cgroups.

Panel

• Refreshed login and panel UI groundwork for the shared CWP interface, and full language coverage on the login screen.

Everything from the matching LTS release is included. See the LTS changelog for the

stable-channel fixes carried into each Edge build.