How to Install CloudPanel on a VPS

Content

Important — Self-Managed Software
The control panel described in this article is third-party software and is not developed, maintained, or officially supported by Libyan Spider.
This guide is provided for informational purposes to assist customers using self-managed VPS and cloud servers.
Customers are responsible for the installation, configuration, security, updates, backups, maintenance, and troubleshooting of the control panel and its associated services.
For control-panel-specific assistance, please refer to the software project’s official documentation, community resources, or available commercial support.
Libyan Spider continues to provide support for the underlying infrastructure and services covered by the customer’s applicable service agreement.

Overview

CloudPanel is a free panel for web applications, with documented PHP, WordPress, Node.js and Python site workflows. It is governed by its own licence terms and is not described here as confirmed open source. It does not include a traditional local mailbox stack: use a separate email solution. This procedure chooses a fresh Ubuntu 24.04 LTS server.

Compare the options first: Free and Open-Source Hosting Control Panels: Alternatives to cPanel

Before you begin

The requirements currently list Ubuntu 22.04/24.04/26.04 and Debian 12/13, x86 and ARM64, at least 1 core, 2 GB RAM and 10 GB disk. Use a compatible server architecture and verify the current list immediately before provisioning. These minimums do not size your application, database or backups; the requirements page does not publish a universal recommended production capacity.

Current official installation procedure

A self-managed VPS/cloud server with a fresh Ubuntu 24.04 LTS installation, working networking and outbound package-download access.
SSH access, the correct public IP, and root access or a sudo-capable account that can become root. A sudo account is not the same as starting a root shell.
A hostname you control, access to authoritative DNS, a suitable domain for hosted sites, and independently stored backups of any existing data.

Install on a new, empty server. A panel can replace web, mail, DNS and database configuration. Do not install over an existing production stack or another panel unless upstream explicitly supports that migration and you have a tested recovery plan.

Step 1 — Prepare your VPS

From your local terminal, connect using your provisioned SSH account. Replace the placeholders and verify the server host-key fingerprint through a trusted channel before accepting a new key. Use your configured SSH port if it differs from the default.

ssh username@SERVER_IP

Confirm that you reached the intended server and that its operating system matches this guide:

cat /etc/os-release
uname -m
free -h
df -h /

If you logged in directly as root, continue in that shell. From a sudo-capable account use the following to become root; the installer and commands labelled root below must run in that root shell.

sudo -i

Apply the package preparation and update commands for the chosen OS from the linked installer guide. Review available disk space and pending reboot requirements. Do not reuse Debian/Ubuntu package commands on a different distribution or pre-install an unrelated web/database stack.

Step 2 — Configure the hostname and DNS

An FQDN is a complete hostname such as server.example.com. Use a dedicated hostname, not the bare domain you intend to host. Create an A record to the public IPv4 address. Add AAAA only if IPv6 is configured and reachable. Follow the selected installer’s hostname and /etc/hosts procedure rather than overwriting that file blindly.

Check hostname resolution before installation. DNS caches may retain old answers until their TTL expires. A wrong AAAA record can break access and certificate validation even when A is correct. For local mail hosting, coordinate matching reverse DNS/PTR with the infrastructure provider and plan MX, SPF, DKIM and DMARC; the panel does not automatically control the provider’s PTR records.

Step 3 — Install CloudPanel

Open the official Other-provider installation page. Its Ubuntu procedure first connects as root, updates packages and installs prerequisites. Follow those current commands, select Ubuntu 24.04 and a compatible database engine, then copy its complete installer command including the published SHA-256 check. Compare the checksum with the live official page; a failed check must stop installation. This KB omits the changing checksum and database-version command to avoid preserving a stale installer invocation.

Open the verified installation instructions

An internet-downloaded installer runs with full server privileges. Confirm its official source, read the current instructions, inspect the downloaded file and use any upstream integrity checks. Do not bypass failed TLS or checksum checks. The commands in this article are documentation examples, not a claim that Libyan Spider tested a deployment.

Before running the installer, allow TCP 8443 only from your trusted administrator IP where possible. At successful completion, immediately open the panel from that allowed address and create the first administrator. The official guide warns that delaying initial account creation can allow someone else to claim it. Keep that restriction in place while configuring access and TLS.

Step 4 — Configure the firewall

Before applying rules, keep your current SSH session open, allow the actual SSH port from your trusted address, and test a second SSH connection. Confirm Console/recovery access. A mistaken rule can lock you out.

There may be several layers: the Linux host firewall, any service-specific LS network firewall/security group, and the panel’s firewall UI. The panel UI often manages the host firewall rather than a separate independent layer. Traffic must be allowed through every applicable layer. Do not run conflicting firewall managers or assume all LS services use the same controls.

For this panel, permit TCP 8443 for administrative HTTPS from trusted IPs or a secure access mechanism. Public websites normally need TCP 80/443. Enable other ports only for selected services: authoritative DNS uses TCP/UDP 53; mail and FTP require their own documented ports. A passive FTP range is needed only if you actually use that service. Do not copy an all-services allow list or disable the host firewall.

Protect port 8443 before installation and the first-account screen. The official security guide documents UFW-based rules and Basic Auth for additional access protection when an IP allow list is impractical.

LS VPS network-firewall guide applies where that interface is available; consult your service controls for other cloud products.

Step 5 — Access the panel with HTTPS

https://server.example.com:8443

The initial access URL is https://SERVER_IP:8443. Create the first administrator promptly; do not look for a shared default password. After trusted hostname TLS is configured, use the hostname URL below. Store a strong unique password and enable two-factor authentication in account Security.

An initial self-signed certificate can trigger a browser warning. Verify the endpoint and certificate identity independently before entering credentials; use a trusted administrative connection and configure a valid hostname certificate promptly. Do not permanently suppress warnings or make exceptions a routine login method.

For a trusted panel hostname, the official Settings guide uses Settings > General: enter the panel domain, ensure its DNS points to the server, and save to issue a Let’s Encrypt certificate. Follow that procedure after the protected first-admin setup. Site TLS is separate.

Step 6 — Perform initial configuration

Use Add Site and choose the documented site type matching your application. Configure its domain, site user, runtime, database and TLS using the relevant guides. Use site-assigned User access for customers who should not manage other sites; Site Manager can manage all sites and Admin has broader permissions. Configure application SMTP with your external email provider and keep MX records directed to that provider.

Test a non-production site, database access and certificate renewal before moving customers. Check runtime versions and extensions required by the application. Use separate limited accounts and protect administrator/recovery credentials in a password manager.

Step 7 — Secure the installation

Keep OS, panel and application packages patched using supported stable sources.
Use SSH keys where possible; test recovery and a second session before changing SSH access.
Use unique strong passwords, enable MFA where supported, and retain a secure recovery method.
Restrict administrative access, review both IPv4/IPv6 rules and remove unnecessary enabled services using upstream procedures.
Use trusted HTTPS; review user permissions, logs, failed logins, resource usage and certificate expiry.
Schedule independent backups, test restoration and follow upstream release/security announcements.

Completing the installer is not evidence of a secure or production-ready server. Validate the application, recovery and monitoring plan before going live.

Step 8 — Configure backups

Follow Remote Backups to select a supported storage provider, configure restricted storage credentials and create the first remote backup. Verify the archive at the destination and test restoring a site. Review exclusions and separately verify database-dump coverage and restore steps; do not assume a site file archive alone contains every database and system setting.

Keep backups separately from the primary VPS, protect storage credentials and define retention and recovery targets. Native panel backups usually cover selected accounts/services; infrastructure snapshots capture supported storage state and may need application-consistency preparation. A managed backup service has its own scope and contract. None is automatically included merely because you purchased a VPS. Verify your entitlements and test restores.

Step 9 — Updates and ongoing maintenance

The official update guide documents the following root command. First keep independent backups and an appropriate infrastructure snapshot if available, review release notes and arrange a maintenance window. Stay on the stable release channel for production.

clp-update

Maintain the OS, panel, web server, PHP or other runtimes, databases, any mail services, CMS/plugins, permissions and backup jobs. Check available disk/memory and logs regularly. After updates, test websites, login, TLS and backups. Document changes and recovery actions. For major OS or runtime upgrades, check panel compatibility and use a separate migration plan.

Troubleshooting and documentation

Issue	Check first	Documentation
Cannot reach the panel	Verify IP/hostname, running server, the actual management port and every firewall layer.	Official troubleshooting / administrator resources
Login unsuccessful	Use the installer’s panel credentials, not an assumed shared password; check MFA, time and upstream recovery instructions.	Official troubleshooting / administrator resources
Installation failed / insufficient resources	Preserve the error, confirm clean supported OS, capacity and outbound access. Consult upstream before rerunning.	Official troubleshooting / administrator resources
Web, DNS or certificate error	Check authoritative records, A/AAAA reachability, the selected service, certificate name and application logs.	Official troubleshooting / administrator resources
Update failure	Review release notes, free space, repository access and logs; avoid force/reinstall workarounds without upstream guidance.	Official troubleshooting / administrator resources

For software-specific help, use the project’s documentation and community. Share redacted logs, OS and panel versions and the exact failure; never post passwords, tokens or private keys. Contact Libyan Spider only for infrastructure or services covered by your agreement.

SSH Gate access for services using LS Cloud — this is a service-specific alternative; a standalone VPS may use direct SSH.

The snapshot guide describes an infrastructure feature. It does not establish backup-service entitlement or replace a tested off-server backup.

Official resources

Documentation reviewed: 23 October 2026. Recheck upstream requirements and release notes before installation or upgrades.