Cloud Commander on Ubuntu 24.04 LTS
by cloudimg
Web based two panel file manager with a built in editor, secured with a per instance login over
Cloud Commander is a popular open source, web based file manager. It presents the classic two panel (orthodox) layout in the browser, with a built in text editor and the full set of file operations: browse, create, rename, copy, move, delete, pack and unpack, upload and download. It is an ideal way to manage files on a server from any device with a browser, without exposing SSH or a remote desktop. This image delivers it fully installed and secured so a working file management endpoint is operational within minutes of launch.
Secure by default
Cloud Commander ships upstream with authentication turned off and a well known default login, which would leave an unprotected deployment open to anyone who can reach it. This image turns authentication on and generates a unique administrator credential on each virtual machine's first boot. Only a one way hash of the password is written to the server configuration, while the plain password is placed in a root only file for the administrator to read. There are no shared or default credentials and nothing is baked into the image, so no two deployments are ever the same.
Hardened and ready on first boot
- The file manager is served over HTTPS on port 443 by nginx, which terminates TLS with a self signed certificate regenerated per VM on first boot, and reverse proxies to Cloud Commander bound to loopback only. Port 80 redirects to HTTPS.
- The service runs as an unprivileged system user under systemd, and its file manager root is a dedicated managed workspace rather than the whole operating system filesystem.
- The built in terminal and console are disabled to keep the attack surface minimal; the deployment guide explains how to enable them behind the same login if you need them.
- A built in self test proves the authenticated upload and download round trip end to end over TLS.
Why cloudimg
cloudimg delivers Cloud Commander fully patched on a hardened Ubuntu 24.04 LTS base, serving on first boot, with no shared credentials. Every image passes an automated verification gate and is backed by 24/7 support with a guaranteed 24 hour response SLA.
Licensing
Cloud Commander is open source software distributed under the MIT License, and is free. The cloudimg charge covers packaging, hardening, security patching, image maintenance and 24/7 support. A step by step deployment guide is provided.